Well of course a hostile actor could use this incredibly accessible resource to test a bunch of emails and find their passwords.
Though perhaps there could be a service where you enter in an email address and it sends an email to that address containing the passwords. That would be a slightly more complicated server to set up though