It's worse than you thought?
@anonsteem LITERALLY SAYS they are doing it.

click Destroy Password to remove the old password from our servers.

Those idiots didn't even click the big red button,
because they never changed the password as was recommended.