Right, but they also store the decryption key -- your Inky password. Which is (presumably?) encrypted… somehow? Maybe?
Presumably, they would not store your Inky password as well -- instead, they'd store a secure hash, not MD5 or SHA-1, which are built for speed, not security....