Isn't it also high time WordPress changed its password hashing from md5 to something better?