It’s about the same, as anyone would be able to read the generated password from the config database (since where to store it would still be hardcoded in the binary).