I just joined to post some feedback on BG3 and I was horrified to see that Larian are sending passwords in plaintext. What is this, 1993? Here we are four months after OP raised this concern and it's not been fixed. As an infosec professional, this makes me very uneasy. Especially as the site doesn't use HTTPS. That means that all communications with the website are sent in plaintext too. Come on Larian. You really need to fix this as a matter of urgency if you don't want to look like a Mickey Mouse operation.
