They would need to be able to see passwords to login to your server to fix stuff anyway, unless you'd prefer for them to backdoor every machine they install wit

They would need to be able to see passwords to login to your server to fix stuff anyway, unless you'd prefer for them to backdoor every machine they install with their ssh key. What's the big deal here?