This is a much wider issue. So many people leave the default password on devices. I once installed an automatic gate with a pushbutton keypad at an airport and they wanted me to leave the default password of 0000 because it was easy to remember. I argued with them for 10 min, but they had the programming instructions and the airport manager straight up told me he'd just do it himself after I left, so I imagine that's what happened because he seemed pretty thick and didn't think that was an issue at all.