Comment by thiht

No, that's just wrong. They can store these credentials encrypted with algorithms such as AES-256. No need to store them in plain text.

This is actually standard security practice when you absolutely have to store a key in a way that you can use it later, such as a password or an API key.