Yet they are the same org who develop and release the client software, which obviously has access to plain text values.