"is there really that many dumbasses out there in the world that don't close password auth?"

yes.