Just wait till BoB lets slip that all passwords are stored in plaintext in a database that is actually a filing cabinet.