Maybe consider adding a note regarding selling your S3:
Change the login and pass back to root / root please. For the purchasers out here it makes things work when we open the box if we can access the GUI.

If you're buying a second hand S3 from Ebay / Amazon etc, that's up to the seller. Bitmain can't regulate that or force sellers to upgrade their firmware / set password to default.
Why not state the obvious then? I'd say having a working reset button resolves the issue sloopy asked, but seeing it is bitmain who released and distributed firmware that disabled the reset button, it is not too much to ask of bitmain. If that is too much, then bitmain should offer a free service to recover locked out S3's, since the lock-out can only happen when the reset button is not functional due to the botched firmware.
Now tell me, which is the cheaper option for bitmain?