Hmm... so poor defaults strike again. Makes sense if you know nothing that simple AES-ECB seems to work and has the simplest API of any of the modes.

But then I'd have to say... why is a company doing a secure password saver not employing anyone who knows the very basics of how to use cryptography? :)