[xxxdarrenxxx]

There's also the fact that the default passwd often is a 'strong' one (ie. 7yYbaksOo... etc.)

I think this is misleading, because the reason for this hack is not technical issue. The strongest passwd is useless if it's transparent like this.

I can understand that shipping with no passwd included is also somewhat awkward or perhaps even not allowed by regulation