I think this is a common trait of many large businesses. Recently I reset my Virgin Media password, only to receive an email with my password in plaintext right there.

I considered writing / emailing but didn't think it would do much good.