This issue is now fixed in 10.0.23-1 as the passwordless root account authenticated via unix socket is only used on fresh installs. Old installs will continue to use any root password previously set.