Owner responsibility.
All the devices I deal with have a default manufacturers admin password, well known to everyone in the industry & easily garnered from the freely available PDF admin guides on the manufacturers web sites.
Shirley the purchaser is responsible for securing his devices with his own user & admin passwords?
If lost or forgotten a factory reset will usually fix that.
Pete