In reply to Snicco.

No one suggested that passwords should be stored in plaintext anywhere. But acting as though Administrators don’t have the level of access they have to overstate the risk created by a security issue or vulnerability isn’t something that security providers should do.