Over the years working on DNN I have seen quite a few posts about people saying their site has been hacked when all thats happened is they have left the default login details set up on their production site. Now we have a warnign system :)