[Security] PlainTextPasswordEncoder::isPasswordValid() throws an exception when the user has no password set (password is null)

Symfony version(s) affected: 4.4

Description
Actually PlainTextPasswordEnocder::isPasswordValid() throws an exception when the user has no password set (password is null)

How to reproduce

When UserInterface::password is null and the encoder is PlainTextPasswordEncoder an exception is thrown

Possible Solution

I think PlainTextPasswordEnocder::isPasswordValid() should return false when the user's password is null.

Provide feedback