How does client-side hashing solve the "server shouldn't have the password" problem? Doesn't that just make the hash into the real password? It may solve the pr

How does client-side hashing solve the "server shouldn't have the password" problem? Doesn't that just make the hash into the real password? It may solve the problem of password reuse across different sites, but it doesn't solve the problem of the server's password database is leaked and the attacker can now try and break the passwords in order to use them to log back into the server and impersonate the user.