It’s absolutely inexcusable that in 2021 we still have apps that come with default credentials like admin/admin. You can yell at users all you want, but history has shown that is not good enough. The blame here at least partially falls on bitbucket for making it so easy to set things up in an insecure way.
To all developers reading this: it is YOUR responsibility to do everything you can to prevent your users from shooting themselves in the foot like this.
To all developers reading this: it is YOUR responsibility to do everything you can to prevent your users from shooting themselves in the foot like this.