> Instead of actually fixing authentication they are baking "have this password been exposed in plaintext" into the browsers

“Perfect is the enemy of good” [1].

[1] https://en.m.wikipedia.org/wiki/Perfect_is_the_enemy_of_good