What's the risk of using plaintext passwords if we assume every user is employing long, random, unique passwords? This assumption is known to be false. We sho

What's the risk of using plaintext passwords if we assume every user is employing long, random, unique passwords? This assumption is known to be false. We should not design systems around this assumption. If we do, popping a random startup will give up Gmail accounts, by the thousands to tens of thousands, and since we've settled on email accounts as The One Ring To Your Identity that imperils their brokerages, domain registrars, employers, World of Warcraft characters, physical safety, privacy, cat photos, etc.