You're absolutely correct, but in evite's case they are storing them permanently. That's actually the reason I posted this was that I forgot my password and requested a reset (~5 years after signup) and they sent it to me in plain text.

And it doesn't mean they're storing it in cleartext either. For some reason I don't think he'd understand how virtual attributes work, though...