does it really matter? there are sites that store your password in plain text and they manage to become big hits. there are sites that completely ignore current css design rules, and they do fine as well. why are you arguing over a problem that is basically 99% solved?