There are legitimate use cases for sshd with default logins. Headless and embedded systems come to mind first. Of course, this should not reach production stage.