david25272

If you use a Turing complete dialect of SQL then screening it becomes equivalent to solving the Halting Problem.

An attacker may obtain the password table by means other than hacking the server. They could be given the file (and encryption keys) by an employee (and you would never know). Or if the hack remained undetected the original hacker might distribute the file to others, giving more people access than just those who hacked the server. If the passwords were hashed & salted it would be much less use to them.