As far as I can tell the driver does use the password correctly (i.e. it does not send a plain text credential over the network), however seeing a method called "hashed password" return a plain text password raises a red flag.