"Hashing password is mandatory because user data can be compromised" is not the same as "Hashing passwords(preferably salted) come into picture only when user data is already compromised"