The irony is that you could seriously argue that it should be illegal to host a site which DOESN'T hash the passwords!