"Plain text passwords "might" be useful in development, as people from odoo say." That is a rather ridiculous claim. It is a ridiculous idea to have users install a module to be able to hash passwords as opposed to enforcing this by default.