The default administrator's password for Sitecore instances is "b". I wonder how the conversation inside the company went when making that choice?
"Let's make the default password 'a'. No, wait, that will be too obvious... I KNOW; let's make it 'b' instead-- no one will ever guess that!"
I've also observed that Sitecore has built in marketing campaign functionality. There is a whole cottage industry selling such products. And yet, no out-cry regarding this "anti-competitive software bundling"! Can you believe it? What kind of lousy world are my kids inheriting, anyway?