Also well documented are attacks against stores of hashed passwords, esp. pre-built dictionary attacks.

There are more ways to do that wrong than right.

Of course, that is irrelevant to my point: even if you do store them all properly, you are still going to get attacked.

Don’t give people such terrible advice unless you also tell them how to protect themselves.