As far as I am aware the passwords are not stored in their service, instead they are encrypted with the password you chose, and you only decrypt your Blockchain.info wallet when you enter the password, and that's how you unlock your private key.
In this case, the wallets are stored in their servers, but they are all encrypted by the passwords people choose when they make said wallets.
Even in the case of the website having a full security breach - they still wouldn't be able to steal your wallet, unless you enter your password during the takeover, in which case they can take your money, but leaving your wallet there even during a full breach without logging into it would keep your money safe.
Thanks for this! I didn`t know how everything works with chosen password, you gave me good insight into this. I use blockchain.info from the beginning and except few times when I couldn`t log in on the site (explanation from them was upgrading the system or something similar every time) everything was good.
I still use that wallet for many things, and its good, and their mobile app is simple and easy to use. By the way I hope they will not be hacked ever never.