I think dodyg&#x27;s point is more that someone using MD5 as a password hash is unlikely to have created a modern, secure, <i>well-designed</i> framework. If there&#x27;s a problem as significant as poor password security then there&#x27;s very likely to be other more subtle problems as well.