or maybe the wallet software has a bug that generates a password protection by itself
So far, there's no bug such like that on bitcoin core on previous versions (AFAIK), even on 2017 released versions, so it's probably not a bug but a user's expensive fault.
In any app/software, setting password/passphrase is always done by the client/user not by the itself.