While I'm sure most of us will change the password after we create a shell user, there may be the off chance that some leaves it unchanged. I just wanted to point out that the default password doesn't always meet the security requirements presented when we change them (uppercase/lowercase/number/symbol).
One of the password generated for my shell user was just a series of upper and lower case characters.