Manufacturers must not supply products with universal default passwords; passwords must be unique per product or set by the user during initialisation, and meet defined complexity criteria.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.