It does NOT see plaintext password [0].

A sufficiently high entropy password will keep you secure against this attack.

0. https://security.stackexchange.com/questions/66008/how-exact...