Ah, that's true. I was thinking less of the specific hashing used, but MD5 is problematic so that's likely what they meant. I thought they were referring to the process in general.