Strong password hashes don't protect your users from the consequences of security flaws in your own application.

They protect the (majority of) users that re-use passwords on multiple services, and, more importantly, they protect you from the PR shitstorm of having dumps of cracked passwords posted to Pastebin after a compromise.