If they had simply removed the default password entirely without removing the default user both groups would be satisfied. It's not clear to me why they removed both.