Stored on different servers in different jurisdictions, right? Sure it's not ideal if you want maximum security of your data, but it _is_ a huge difference from simply storing plain text.