I was just going to comment that implementing this requires storing the password in cleartext on their servers... that's absolutely terrible and not at all best

I was just going to comment that implementing this requires storing the password in cleartext on their servers... that's absolutely terrible and not at all best-practice... in fact, the furthest thing from!