@maxleibman@beige.party since all java keystores require a password, including a Root CA store, and billions of devices run java I posit that, by volume, most passwords are "changeit"