I installed a CH from debian repos (just copied from docs) and installation process asking me for a password, I typed my testing password ended by "();" witouth quotes.

After install I can access without any password.

users.xml show like "<password></password>" for default user.

¯\\\_(ツ)\_/¯

fs::path users_d = config_dir / "users.d";
        std::string log_path = prefix / options["log-path"].as<std::string>();
        std::string data_path = prefix / options["data-path"].as<std::string>();
        std::string pid_path = prefix / options["pid-path"].as<std::string>();
        bool has_password_for_default_user = false;
        if (!fs::exists(config_d))
        {
            fmt::print("Creating config directory {} that is used for tweaks of main server configuration.\n", config_d.string());
            fs::create_directory(config_d);
        }
        if (!fs::exists(users_d))
        {
            fmt::print("Creating config directory {} that is used for tweaks of users configuration.\n", users_d.string());
            fs::create_directory(users_d);
        }
        if (!fs::exists(main_config_file))
        {
            std::string_view main_config_content = getResource("config.xml");
            if (main_config_content.empty())
            {
                fmt::print("There is no default config.xml, you have to download it and place to {}.\n", main_config_file.string());
            }
            else
            {
                WriteBufferFromFile out(main_config_file.string());
                out.write(main_config_content.data(), main_config_content.size());
                out.sync();
                out.finalize();
            }
        }