Collisions are not interesting. Millions of leaked passwords hashed with MD4/MD5 are of very practical interest.

Ok, preimage resistance is still pretty strong, but it has been reduced enough that I wouldn't trust it remaining above practical attacks beyond the next decade.

If you use the same password on different sites despite password managers and now passkeys you are asking for it.