Twitter can store a (bcrypt hopefully) hash of my password. The third party must story my password in plain text (yes. it could store it encrypted, but it must

Twitter can store a (bcrypt hopefully) hash of my password. The third party must story my password in plain text (yes. it could store it encrypted, but it must be able to decrypt it, so an attacker could too).