This is currently in review - however generally this is seen as a "no-no" if the passwords are also stored in plaintext - which they are not. Hope this helps a little, and the fact that it's in review may give some confidence that it's actually being looked in to.