Are we still use md5 as default as password hash?

[abnoeh]

old times there was a musl size hack that disabled everything except DES
and md5, but that was disabled in 2021 Dec
https://github.com/openwrt/openwrt/commit/66768755791286fc02a38d1b437a9da74290041d,
allowing sha256,sha512 and blowfish

however Busybox doesn't configed to use those and still use md5 as
default, while we bring other hash algos into flash anyway: