Jan Dembowski on "[Plugin: WP Mail SMTP] Security issue"

So is it possible to hash the password in order to reduce the app's vulnerability surface?

Nope. SMTP Auth requires that the actual password is transmitted (hopefully via a TLS/SSL encrypted connection).