ZCode's default key-generation method is alleged to be derivable from local machine information
The public code is alleged to show that ZCode's default credential key can be generated from the operating system, username, and user directory; an attacker must still first obtain the local credential file.