Passwords are not stored in plain text; they are sent by email, which isn't current best practice, but then hashed and only the hash is stored.
There are plans to update the forum, eventually, including for better security.
Thank you. Good to hear that.
