Unfortunately, many sites have to support a "mail me my password" feature. A tech site like this can get away with just sending people a new auto-generated password, but I don't think that, say, Amazon.com could do that. That means they must have the passwords in plain text somewhere.