"If they can send it to you in email it means they are storing it as plain text." That's not necessarily true - you can send it in the same request as the form

"If they can send it to you in email it means they are storing it as plain text." That's not necessarily true - you can send it in the same request as the form submit that accepts it.