Well, being that I was a moderator for quite a long time, plenty of accounts.
Even a moderator's account was once compromised, resulting in freaking *porn* on the front page.
Every moderator was actually required to change their password as a result of an attempt at malicious SQL injection. It failed, but additional security layers really don't hurt anything. It's not pointless.
Edit: Think about it this way. If someone manages to do this to someone with the power to publish content, a single malicious ad embedded on the front page for a couple of hours could result in several hundred thousand people being exposed to keyloggers or other malicious content.