Hopefully this brings an end to pi:raspberry and pals so beloved of ssh botnet scanners.
https://tutorials-raspberrypi.com/raspberry-pi-default-login...
Raspbian 'set the tone' of insecure by default and it seems it took legislation to improve matters.