Re: It should just work
The solution is evident. When a device with a fixed username / password, like user/12345, rolls from the belt or better at the final acceptance test, it is hooked up to a computer that logs in, sets username and password to a random value and prints a label. This should than be enforced by law to convince the beancounters of the world.
The device can than be marketed as "Now with improved security bla bla bla".