His analogy to exposing password hashes doesn't really work.

The primary reason you don't expose password hashes isn't that someone will break the hashing algorithm. It's that users come up with crappy passwords, and exposing the hashes would let an attacker do a brute-force search on the likely password space.

His other points are pretty good, though.