Well I think the reason why its stated that the password save in XML.
Usually when you sign in you need to enter a password however in default the save password remains unchecked ones you checked it and sign in, supposed that your password is already in the account.xml. But if you sign in and still uncheck from save password then your password will not listed in XML.