[psychometry]

You're not creating it, but rather enabling it. When the bug is triggered, the root user is enabled (per Directory Utility).

[fattire]

But you are creating the password for it.