So the makers know of the security issue, but still leave it in by default? That's bad. Either fix the issue, or put warnings all over the place that cannot be missed to inform the user.

This is just what another poster commented on, sacrificing security for ease of use.