But when they get into your machine and steal that plain text file, it will be mtgox's fault for enforcing an impossible password and making us write it down elsewhere.