Hi @mraiman. I would agree with what @MrVapor mentioned about this being an oversight. The addition of a username and password is also a possible troubleshooting step, though it should be removed afterword. This is done to avoid 1) the agent seeing your database password and as a result 2) your having to change the database password, which would then require you to change your application's connection strings.
If you ever feel that an agent has acted incorrectly, the best thing to do is speak with a supervisor to voice your concerns. They have the mandate and ability to review these complaints and make sure they are addressed. If you don't wish to call, you can reach out to our chat support team. They are available Monday - Friday, 5 am to 6 pm (UTC/GMT -7) on the United States - English version of our Help page.