Wait, so how does this classify as a vulnerability, then? If you explicitly set up a user account with no password (not something you&#x27;re ever going to do by accident on windows).. people will be able to log into the account with no password.