@jlapoutre : not a #homeassistant user myself (an infosec nerd instead): indeed, program it as opt-out.
Here in NL I keep hearing people in TV talk shows say things like "is your password strong?" - as if people have ONE password. I'm surprised that NEVER anyone points out the risk of password reuse (which is stupid even if your password *looks* strong). Unfortunately HIBP will only warn you if that particular password has actually been leaked (and it's cryptographic hash managed to end up in Troy Hunt's database).
We need to keep explaining how things work and mention both advantages and disadvantages.
@defnull : don't forget to mention that a cryptographic hash function is being used. Which is extremely different from, for example, a modulus function (or some other function used to speed up searches) or a perceptional hash (more on the latter in https://todon.nl/@ErikvanStraten/117445784599406926 which is about #ChatControl).
#CryptographicHashFunction #PerceptionalHashFunction #HashFunction #Reversibility