Why is it so important not to save passwords in plaintext? I think it is the same issue like authorizing a user on a RESTful webservice, where most developers claim: "Don't send your security token inside the URL". If I'm a hacker and having access to database, it's unimportant if the password is secure or not, because a password can be changed (factor: human), but not my house number, etc.
The same in my REST example: If I have the possibility to grab the network traffic, it should be unimportant if the Authorization token is placed inside the URL or the POST/PUT header.
Why shouldn't I store passwords in plaintext? I saw many people facepalming, but nobody are fit enough to give me a good answer.