Baseline · Auth & access control
B-01 First launch forces authentication
criticalmanual review
Why it matters
No blank or default password; unusable until a credential is set.
How to test
Do a fresh install and check it forces you to set a password.
How to fix
Force credential initialization at first launch; disable default passwords.