Protecting one part of the system against code/development errors in other bits of the system seems like the sane thing to do. Maybe this guy is in control of the password scheme but not in control of the SQL stuff.