A request / suggestion:  I'd like to see the install scripts generate random passwords for the admin and host accounts, which then would be displayed on the home page like the current information.  Though of course it is the responsibility of the web site owner to change their passwords themselves after installing DotNetNuke, as the popularity of DNN increases I bet a sizeable percentage of new users don't follow that best practice.  I would bet that even now, you could probably get into a significant percentage of DNN sites just by logging in with the default username and password.