As Amazon uncovers login credential list online, does controversial GCHQ password advice still stand? Analysis