MoneyPrinterGoBrrr is changed by any sane user after first login. 2FA is available, so no, stealing raspi won't be enough. But yes, a hacker guest with wifi password can sniff traffic with wireshark and maybe get the real password (I could not, must be hashed).
reply
Most people never change the default.
reply
Why blame Umbrel for this? If I remember correctly, Umbrel 1.1 forces you to change the password on first login.
reply
No, not all default passwords.
reply
I talk about the main password MoneyPrinterGoBrrr. The internal passwords of some apps are redundand.
reply
Have fun with your Umbrel…
reply