Electric vehicle chargers of the brand Hypercharger were shipped with an insecure default password and allowed access to a configuration interface to anyone over the Internet. The vendor reacted quickly, but incidents like this show potential IT security risks of electrification infrastructure.
For the price of free they could generate one. Though they shouldn’t be hard coded regardless of how good it is.
I’m sure the things have network adapters, using the MAC address would be marginally more secure than this.