Or just as bad
The Slate page mentions "decrypted passwords." There are (edited)--encryption-- encoding methods that can't be reversed, ie there's no key with which to decrypt the information. So even if the bad guys have the password in its encrypted form, it's of no use in discerning the actual password. They're reduced to guessing, meaning they're still on square one.