Re: This is a controversial opinion, no doubt, but....
Agreed, I genuinely don't think I've ever seen anyone in IT not change a default password. It's almost like a rite of passage when a device comes in to make it "ours". Same at home.
If it's sitting on default, I don't trust it and even when it's not, I still think it's an IoT piece of junk usually.