From what I've seen on here, one is asked for a password when installing openssh (which enables logging in as root, default is having rpoot login disabled).