Yeah you and the other 0.1% of users with strong, unique passwords are save.

I’m sure they are hashed and salted

I wouldn’t. I have seen enough password databases to know everything from cleartext, base64, md5, encrypted with a key stores in the same database, pbkdf2 to argon2id is used in real world applications.