While it might just be theater, not requiring a password immediately seems like a pretty big security regression.