When setting a new password without enabling a password-handler (setting to "none") you get a confirmation about a successfully changed password without actually changed it. SVN rev 10214
This is only an administration issue. Without having a password manager in place, there won?t be any passwords... Although this could happen during an update.
However, it is a bit misleading for the user but not such a big issue.