What's troubling is that there are lots of applications and web sites which store your password in plain text and they aren't labeling themselves as "evil".