That's my theory too.

A very similar thing used to happen with people accidentally using a QR code linking to a popular blog post or something explaining QR codes ("PLEASE INSERT QR CODE HERE --ed.").

Somewhat hilariously, even Google's (discontinued) Titan security key had this type of blunder in its Bluetooth software: It was using the example key from the Bluetooth specifications for all keys, making them vulnerable to man-in-the-middle attacks [1].

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2102