I don't interpret that as meaning any passwords were stored as plaintext. The act of logging in caused them to create a new password hash that included a salt, which was stored in the database (and presumably wiped out the old one.)

That all can be done without plaintext storage.