Is it legal that my password is not encrypted?

Question

Information Security

Hello.
I remember a few years ago I registered on the notorious ozon.ru and received an email thanking you for registering, and below were my login and password in plain text - I was shocked then, because in general I saw my password in text format for the first time)
Then it was useful to change it right away this password is everywhere where it was only used and went around telling friends that such a giant as ozone allows such a disgrace.
Now I confess I don’t know how things are going there and I don’t want to know, now we are talking about another resource.
I registered on the resource twirpx.com, which is no less popular in my niche, and there the same trick was sent to the mail my password in clear text.
The question is, what the hell?
Or am I missing something and is this normal?
It is unlikely that they send the password before it is stored in encrypted form, because it is unlikely that they will send a thank you letter for registration before the fact of registration.
What to do in such situations with sites? complain or what?
I really didn’t think that in 2018 I could face this, the second such case in my entire life and both times from very large resources

Answer 1

https://www.anekdot.ru/id/274750/