Even more shocking. This wasn't a total oversight, but they've treated it as a won't fix, as if password hashing is optional and not necessary in core because there's a module that optionally does it...

http://micro.fragdev.com/notice/1257792 https://github.com/odoo/odoo/issues/1975

I... I don't even know what to say. I can't get away from this software fast enough...