I feel like many security professionals could have thought "this is necessary for some internal system operation so I won't touch it, and it's not like it has a

I feel like many security professionals could have thought "this is necessary for some internal system operation so I won't touch it, and it's not like it has a hardcoded password or anything" and yet it has a hardcoded password.