I had a little chuckle when I read one of the release notes in the latest LibreELEC 9.0.0 Release.
Changeable SSH passwords and a default firewall configuration have been added to combat the increasing number of HTPC installs that can be found on the public internet. The increase is partly due to simple maths; our userbase has grown so the number of users inappropriately exposing their HTPC to the internet has also grown. The static password for libreelec is present on most/all password dictionary lists so it’s important we start encouraging users to change it (the first-run wizard will prompt when SSH is enabled).
That’s a really fancy way of saying “We have more people that don’t even know how to plug the thing in, let alone configure it.”