Good point, the report calls out that the root password for 40+ servers was the same, and that a large number of employees knew or used it. Seems sensible to transfer that same mentality across to other sensitive accounts.
Ouch having worked at BT our internal security would have had afield day with that - but Mobile telecoms where always considered much weaker technicaly.