I hate this happened, but it's expected. The downplaying is normal, especially with security and data breaches being so prominent, but if only 1/3 of the accounts being compromised, it's not surprising that many of us didn't get the email or auto-reset.

Despite the issues, I think a system like Disqus works better in a lot of ways than other commenting systems just because of how they're connected on a network (I get my notifications from tons of convos this way), the same with WP.com or .org logins, too.