In reply I would ask them "so you think hiding passwords is wrong?" And also "so no one should share secrets with you because you cannot keep them?"