Their website is probably front-ending mainframe CICS screens that have a short password field, saved in plain text, just like when it was developed in the 1980s.