New user - email password security issue?

Just noticed when you setup a new user in Revo that you have the option to "send the new password by email".

Does anyone think it'd odd that the default email to the new user mentions the location of the manager login?

Once you log into the MODX Manager at http://mywebsite.com/manager/, you can change your password.

It strikes me as odd because

1. I'd rather not divulge the location of the manager
2.The new user I have setup is only a low level member of certain resources and doesn't have manager access.

??

Yes, I agree that it's a questionable practice (as is sending the username and password as plain text).

That said, unless you give the users the URL to log in, they can't.

For front-end-only users, I use Subscribe, which lets users self-register and doesn't expose the URL of the manager or login page, the username, or the password.

I always just change that message in system settings. There appears to be a web user email but I don't know how to get that sent out.