not that stupid as leaving a million passwords in plaintext. There's a limit to what a great developer can do due to oversight, laziness or whatever.
As an anecdote, I once worked on an application where we had to store passwords in plain text, because the password should also be used in a piece of hardware and to provision that hardware, we needed to send the password to said hardware. There's just no good and easy way to solve that and when you're constrained by real world limitations, sometimes you just have to accept a suboptimal solution.
Anyway - Just an anecdote to show that things aren't always that simple.