He's right about one thing, hashing is mostly for data integrity and encryption for confidentiality. So if passwords are leaked and the organization says don't

He's right about one thing, hashing is mostly for data integrity and encryption for confidentiality. So if passwords are leaked and the organization says don't worry, fortunately your password is encrypted but its better to change it, just in case when in reality they hashed it, they are just misleading their customers and not even trying to improve the password security they have in place.