Interestingly, Chrome AFAIK did and still does this for stored website passwords. The team argued that anything but plaintext would be a more dangerous illusion of security, since Chrome itself needs to be able to retrieve that data at any time with no password.