Unless, you know, they sniff it during registration or login. Or modify the lemmy server to store them unhashed. You are absolutely trusting the server owners not to do any of that, and if you use a password you’ve used elsewhere you need to change it everywhere.