Good point. This is kinda like a one-time programmed code that tied to the device. When you setup it via the App it also said that in case you forgot the password, you can use this code to reset.
Btw, you can create other users using Onvif Device Manager with access control lower than admin...