No, I don't think that's true at all - no plug-ins, no off-the-shelf builds do unencrypted passwords - it's a thing you have to go out of your way to do these days, because hand-rolling is a ridiculous thing to do

Cisco and others still ship devices with hard coded passwords etc. Sites still get hacked with SQL injection attacks. People don't learn.