I hope they don't provision their servers with the same default root password; it would be trivial to compromise.