You have this completely backwards. MD5 is safe (relatively speaking) as the hash part of a signature as there are no known viable pre-image attacks against it

You have this completely backwards. MD5 is safe (relatively speaking) as the hash part of a signature as there are no known viable pre-image attacks against it at this point. For password storage, it's broken simply because it's fast, as has been pointed out many, many times.