The problem is that hardcoded credentials is such a bad smell that we can be confident that the code quality is extremely poor.