"Any Password Works" Is Not a Login Bug – It's a Decoy Tell (medium.com)

or it can also be a sinkhole, like all the canaries poping up these days`