Comment by stephenr

They knew the "plugin" stores passwords in clear text and still chose to use it.

I don't care if they had a plan to move away from it. That's not good enough.

Seriously how fucking hard is it to do things properly?