Many sites require users to "log in" with their social media or Google credentials to "link" the generated account. This allows attackers to steal personal information and gain access to other sensitive services.