It seems to me that the database root user with an empty password is a pretty big security vulnerability,
since many Linux distributions come with all ports open. Not only that but also other programs on the same machine can access the database easily if the password isn't changed (how to change the password programmatically btw?).

Thus I'd like to generate a random password by default for the root user instead of an empty password which then can be got programmatically like so:

Connection conn = DriverManager.getConnection(configBuilder.getURL(dbName), "root", configBuilder.getPassword("root"));

Otherwise being able to change the password for the root user programmatically via for example db.setRootPassword("pass") would be also great.