I have recently scanned addresses within a radius of my town and there's still a lot of cameras with default credentials or with no password at all. It's getting better over the years, but not quite.