> Why would you have both passwords be the same? That makes no sense. All passwords should be different.

I'd put good money on the percentage of AT&T customers who use the same password for all their web services being sizable enough to make that a valid concern.