[kroltan]

Yes, but so is having the password check happen on the client-side, which I have seen happen in two different routers' stock firmware I've owned in the past.