God, I heard this in a podcast a few days ago. Why in the *holyest* of fucks would anyone expose critical infrastructure to the internet.
And for whatever unholy reason they decided that it was necessary, why in the fuck would they keep a default password. Man people are stupid.