7.1 - user_hash column remain unused and capturing password MD5

user_hash has been a legacy column induced in the earlier version where the PHP platform was lacking the fancy algorithm to deal with the password encryption has been lying around since then. Though this column is never being used after adopting PHP advancement in the password handling its presence of very less use and invites attacker if data is not secured on the servers see reference