...because most people re-use the same password across all websites, despite decades of begging them not to. In which case, do you want a blog exposing their password in plaintext?

Nobody does; so there's very little to lose by also encrypting.