To be fair you'd be surprised how many Hassio hoppyist leave their MQTT setup default (or even without password). Was part of a community 2 years ago that was tinkering with IoT for home automation, and most of them were not that familiar with linux, let alone lua, and would leave all their setup default.