I assume he means that you should always set a password for "root". Though most users don't even knows it exists.. hence it should have been taken care of by apple.