> So most consumer devices have either a "reset to defaults" feature or a hidden support password.

One of those is sensible, and one is not. Put a recessed "hold to reset" button on the device, problem solved, no backdoor required or desired.