rspec/rules/S5344/rationale.adoc

Attackers who would get access to the stored passwords could reuse them without
further attacks or with little additional effort. +
Obtaining the plaintext passwords, they could then gain unauthorized access to
user accounts, potentially leading to various malicious activities.