Another finding: Apple removed the root password in 1.1.2.
I do not think they truly believe that an effective measure. It's innocuous. It's only a risk if you run SSH and if you run SSH, it like that you will install a new one, so why bother removing it.
So when installing SSH the new packaging will need to add a password to root, or copy from the "mobile" user, that is still "alpine".
UPDATE:
my bad. For some reason the file I've retrieved from the unencrypted image showed it, but uppon examining the file on 1.1.2 after an upgrade it has a password.

