If your not gonna change password to something other than default i'd just turn of CE authentication. A customer can find both service mode access method and the default password in a 30 sec google search
Some features get disabled if CE auth is off.
Remote Panel is one
Bookmarks