Any new install of master from August 3rd 2016 (f0ea6a7a164) until today will install a default sshd_config that allows cleartext passwords for remote ssh logins to the machine. (Empty passwords are still disallowed).
Upgrades and normal reinstalls are unaffected, they will keep the pre-existing /etc/ssh/sshd_config file. 4.6 is not affected. -Matt
