[brudgers]

>"i confronted them that they should hash password"

Maybe they should. Maybe they don't need to.

My bank needs to encrypt may password because of their fiduciary duty to protect my money.

HN does not because the consequences of unauthorized access are relatively trivial and there is no duty.

In other words, passwords should be encrypted if it is a better alternative than not encrypting them and customer service concerns can easily outweigh any benefit encryption provides.