Answer:
To prevent leakage of user's passwords.
Step-by-step explanation:
I don't really know the premise of your question, but I assume it is this. If the hacker has access to the user's data, they may have the email address. If they cannot crack the password hash, then they may not attempt to login to the user's accounts on other websites.