A municipal utility provider, HydroFlow, allows its field engineers to access the remote valve control network using only a username and a static password.
State two distinct security risks or limitations of relying exclusively on passwords for securing access to this critical industrial system.