|from here (source image)|
Encryption doesn't stop SQL injection or cross site scripting. It doesn't stop malware or phishing. It's a rotten way to protect passwords. Encrypting things doesn't make all your security worries vanish, it's just one of the tools you need in your security toolbox.