Passwords should not be sent in plain text
The current default implementation in the Accelerator is that if a customer chooses to have an account created when placing an order, an email containing the password in plain text is sent to the registered email address. Even though it's possible...