A lot of code is certainly not written careful enough. Plenty examples of plaintext passwords storage in the wild.