Uhoh. Let's home they don't read your suggestion. More likely than not they'll use a single admin account. But not to worry, they'll probably use l33t to make it secure.
admin
p@ssword123
In six months El Reg will have another article on TfL along those lines, I'm afraid.
With a reply from the company like, "You NEVER say anything good about us. We even followed the advice from one of your experts that we found below the article back in August, and you're STILL on our case!"