While concerning with regard to their stance on security, you should really assume all web services store their passwords in plaintext. Passwords have always

While concerning with regard to their stance on security, you should really assume all web services store their passwords in plaintext. Passwords have always been kept in confidence on the web, without any guarantee of secrecy. Until web standards improve and address this with client side hashing this is an uphill battle, like trying to get people to use prepared queries instead of escaping. Use a password manager with a random per-site generator and just accept it.