Toms Shoes needs to learn about internet security

Just ordered some shoes from Toms. Love the shoes, but was a little disconcerted to find the following email in my inbox:

I redacted what was there -- my plaintext password, sent in an email. Wat?

Especially disconcerting because I told the website to save my billing information.