They could just look at the Chromium source code to see how the passwords are encrypted. Perhaps it's just not high on the priority list.