That'll work until the database of device credentials is breached from company X which provides call center support services for manufacturers A through Z and needs said credentials at hand.
Manufacturers don't need to keep a credential database, as legitimate users can simply look at the label.