Whats with the populated and active RPC info in the default .conf on first start?

That's rather shady.  And of course since everyone knows the username and password, it has resulted in tons of attempts to connect to my db and, I assume, steal coins.  I don't have those ports open, but still.

Not very professional IMO.