Leaving default accounts is the opposite of server hardening. When we receive or build new systems
they often are completely open, before we introduce them to our environment we harden them. We
develop a long list of ports to close, services to disable, accounts to delete, missing patches and
many other things.