I'll say that, absolutely: databases should NOT store authentication information, but only salted hashes.

It's an equal certainty that there'll be implementations around for as long as humans remain that stupidly include un-hashed authentication data.