I wouldn’t find it too surprising, there’s a ton of Ubiquity equipment out there since it’s so cheap, yet usually works fairly well. I’m not sure about their newest stuff but I know a lot of their older lines of router, switches and radios did not force you to reset the password when you set it up the first time which led to a lot of equipment getting installed with the default user name and password. Especially after a lot of home users and hobbyist started picking it up that don’t always know exactly what they’re doing.