What percent of pi users don't connect a keyboard and monitor? I don't mind having a default password since when ever I've used a pi I ran it headless and configured it on first boot with SSH. It would make sense to force the pi user to change there password on first login, can't remember if this is the case.