Assume the database gets dumped. Plaintext you immediately have a password. If hashed/salted, this would need to be cracked and takes time/resources. It's not

Assume the database gets dumped. Plaintext you immediately have a password. If hashed/salted, this would need to be cracked and takes time/resources. It's not perfect/ideal but it buys time. A raw pw dump you're good to go to start testing them on other sites. In short, its like having a kia/hyundai vs. any sane car manufacturer. All cars can be stolen, some just make it easy.