I'd be surprised if Claude would implement password storage without a salt, tbh (assuming a recent model). If he doesn't know the implementation details I'd say it's more than likely that it is actually salting the hashes.