Anonymous guest is moderator without password
I created a meeting with no special config, but with a moderator password set.
I then opened the default join URL in a private browsing tab, so without a valid login session in InfraBlue), and joiend the meeting without entering the password. I was joined ith mdoerator privileges.