Why are we able to see our passwords in plain text when Editing the XML Source files?

<username>datasync_user</username>
<password>notsecure</password>