The frontend part can still use a secure password mechanism which is then hashed to a password suitable for the underlying backend system.

There's no reason to keep the bad decisions from decades ago as a part of a modern system, even if it relies on the legacy system.