The API can still return passwords. I'm sure a developer could quite easily hook into that API with a client based program and fetch passwords as needed.
http://mail.smartertools.com/services/#svcUserAdmin_GetUser
Matt Petty
Senior Software Developer
SmarterTools Inc.
www.smartertools.com