An online service that stores passwords as plaintext also offers to keep a credit card on file. What could go wrong?