The passwords were only if you were connecting over the network. If you were using a directly attached terminal, you didn't need one.
RMS insisted that everyone use their UNAME as their password, but he wasn't widely listened to because the whole reason PWORD came into effect was because turists were getting increasingly destructive. People weren't happy when their mail got marked read (or worse, deleted) because some random from the network had logged in as them simply because they could and did not understand what their automatic login script was doing.
That was only true in very early systems. By the time of the PDP-10, HACTRN will nag you to log in if you run most commands and the gunner would kill off your job after a relatively short interval (the exact interval differed from machine to machine).
https://github.com/PDP-10/its