This is a very well written article. Thank you for the contribution.
I agree that a huge chunk of the industry has a false sense of security about password encryption, and that we should do more to educate them.