TIL Windows local account passwords still use NTLM (md4) unsalted hashes 💀

Credential Guard does make this less terrible but still.