Ok, here's another question which worries me a lot more...

How come when I log into WHM and go into the MySQL functions I have an option to change the user password.... but most of the names listed shouldn't even be there?