I think it is a security risk because when you find a username like 'admin' you can suppose that the table prefix is also default, and so on...