They could have added that script in like 2 minutes or less,
Isn't that the story already? Implement password hash in 2 minutes or less?
Yeah, maybe they should've spent 2 minutes on something like that. It is trivial after all. So is security - who cares?