With the poor security practices of the non-technical majority, it doesn't take an encryption backdoor for their password to end up on PasteBin. It already is on PasteBin.