A site stores only the SHA-256 hashes of passwords, without salt. Why is this protection considered insufficient?