I installed a CH from debian repos (just copied from docs) and installation process asking me for a password, I typed my testing password ended by "();" witouth quotes.

After install I can access without any password.

users.xml show like "<password></password>" for default user.

¯\\\_(ツ)\_/¯

users_config_file.string(), users_d.string());
        }
        else if (!is_interactive)
        {
            fmt::print(HILITE "Password for default user is empty string. See {} and {} to change it." END_HILITE,
                       users_config_file.string(), users_d.string());
        }
        else
        {
            char buf[1000] = {};
            std::string password;
            if (auto * result = readpassphrase("Enter password for default user: ", buf, sizeof(buf), 0))
                password = result;
            if (!password.empty())
            {
                std::string password_file = users_d / "default-password.xml";
                WriteBufferFromFile out(password_file);
#if USE_SSL
                std::vector<uint8_t> hash;
                hash.resize(32);
                encodeSHA256(password, hash.data());
                std::string hash_hex;
                hash_hex.resize(64);
                for (size_t i = 0; i < 32; ++i)
                    writeHexByteLowercase(hash[i], &hash_hex[2 * i]);
                out << "<yandex>\n"
                    "    <users>\n"
                    "        <default>\n"
                    "            <password remove='1' />\n"
                    "            <password_sha256_hex>" << hash_hex << "</password_sha256_hex>\n"