These UK rules ban manufacturers from having weak, easily guessable default passwords such as ‘admin’ or ‘12345’, but one expert believes these new rules don’t go far enough.