There exist plenty of services on school campuses that send passwords in plaintext. There are services outside of school campuses that do, too. Hell, I’ve been able to bypass 2FA checks by just navigating around them, I don’t know what else to tell you, not everything out there uses the best security practices, so don’t assume that they do.
I hate myself for buying a John Deere tractor, but it was up to $5000 less than any comparable competitor at the time, included a 5 year service contract, and was 0.9% financing.
I’m in a better place financially now, so when I can and need to, I’m absolutely getting something different.