That's a great idea, but IANAL, so I can't say if it passes muster for EU anti-anti-competition laws. I'm going to go out on a limb and venture two guesses: 1)

That's a great idea, but IANAL, so I can't say if it passes muster for EU anti-anti-competition laws. I'm going to go out on a limb and venture two guesses: 1) Any mechanism that requires manufacturer intervention is going to draw the eye of these legislators, which would likely mean some means of resetting that password for third-parties, which significantly diminishes the security utility. 2) If you've ever worked with consumers and "passwords", you know that they don't remember them. I think this bolsters support for regulations that require the reset procedure to be accessible by third-parties.