If that's really the case it seems less bad to have the company provide unchangeable passwords... (if they're unable to switch to safer solutions)