Well, there was the infamous "double press enter on a blank password gives you root" thing, that started out on the apple forums, and _was_ a solution :-)
https://developer.apple.com/forums/thread/79235 (comments at the time: "macOS High Sierra: Anyone can login as “root” with empty password" https://news.ycombinator.com/item?id=15800676)
(although this one was the developer forum, which seems separate?)
Developer forums are indeed entirely separate, and historically quite useful. I haven't participated in years but it used to be easy enough to get eyeballs from relevant Apple engineers there.