In reply to Augus van Gils.

There is plenty of criticism that can be made about what happened here, but they were not intentionally storing the passwords in plain text and they are not saying that is okay.

They were not even trying to store the passwords at all, they were storing the contents of the PHP function debug_backtrace() as part of logging.

The biggest issue is the length of time they took to address this, not the original mistake.