Getting away from more direct requests I can absolutely imagine AI offering passwords/suggestions as part of a coding session. Including “temp” passwords that look secure so “why bother changing it?”.

I mean technically it would only be the last step and presumably the sum of multiple customers. But someone else has already claimed this may be an intentional psychological gambit.