I agree with this. The big one I came to post myself, but will state here instead. disable root login to webui and SSH. force user to create their own username. especially with the recent news of hacks and such... they would need to "crack" a username and a password, instead of just a password.