[nazbot]

Don't most sites require that you enter your old password before you can change it?

[corobo]

Indeed, I guess this is a +1 against storing passwords plaintext (well, obtainable in any case) - as a person could change your password and take over the account completely

[taeric]

Not if you use the "reset" option. Which... you have their email account. So...

[phablet]

Heh. I wasn't even thinking about the "Forgot your password" feature. Better still.