To allow people to log in to your server and make helpful changes without hassle, change all the passwords to "password": this is technically true, but applied in the wrong context it could lead to various problems. The hard part is figuring out which contexts have this safety property, and which don't, especially keeping in mind that contexts change over time.