you can also do the exact same thing with any other HikVision camera too

Most people that install security cameras don’t directly connect them to the internet like this. A company that’s installing them at scale should be aware of this.

Definitely seems like a configuration issue to not require any at all

Modern Hikvision and Dahua cameras don’t have a default password. They require you to set a strong password during initial setup.

In general, a lot of electronics have moved away from generic default passwords, as many jurisdictions ban them now. Any modern device should either require you to set the password during initial setup, or have a randomly-generated password printed on a sticker under the device.