because the distro is all about convenience over security, while selling an aura of technical superiority. Which is the modus operandi that worked for the distro author in the past, when he sold VPS with a big markup, because he also gave a script that did "ssh vps -- curl somebashscript" to do basic webdev taks.

> The security tradeoff was made for them, applied to the default account, and the tradeoff was not explained to the user.

just like the vps era. it's all about convenience.