The developers have already answered, that the website with sign up has nothing in common with their exchange development. It was created only for preliminary sign up to give people chance to promote their coin to listing of future exchange. As far as I understand this preliminary website will be closed as soon as exchange is ready. The sole purpose of that website is to accept requests to add new coin and vote for it. That's all, nothing more. Keeping the passwords without hash was done for ease of transfer them to exchange, where you'll have number of protection layers, including hash, salt, etc. Anyway, I don't think, that absence of 2fa on the website, where only voting is accessible, should be counted as security issue, as a lot of people shout.
These children were cought by hand for cheating, voting with same ip, network, user-agent and other parameters. That is the reason, they are excluded from voting, not because of their "clever" words about pseudo security. They should note, that continuous creating of new accounts to talk about security again and again will not help them to be returned to above mentioned listing.