Many operators cut off well-known leakages and can deny compromised passwords during setup