I always thought it was dumb to leave the admin username as ‘admin’ instead of ‘ITlord’ or ‘hackthis’ or some other usefully different login.