I was worried about the headless setup, but apparently you can create a user in the official imager tool.

I guess I'll go make a fork of the OS that keeps the default credentials. No way am I getting locked out of some stupid robot or whatever because I can't remember the password!