> The device initially came with a default password, and SSH access was enabled using this preset password

That alone ends my trust in the brand.

...you need a password to log in onto it to change it. That's hardly unique.

You could say "but they could make random one that is displayed on display!", but they also sell headless version with no display at all so that's not an option