then don't you run the risk of people having an exposed default password?