No, it's not difficult, it's just extremely insecure. Email should always be treated as an insecure channel, so sending passwords over it is just bad security

No, it's not difficult, it's just extremely insecure. Email should always be treated as an insecure channel, so sending passwords over it is just bad security practice. The system should only hang onto the password for as long as it takes to hash it.