Given that the guy's nick is phreakmonkey, I assume he took that into consideration and used a throw-away password that was gone before the video was posted.
The IP address he connects to is 10.6.105.71, I don't think he's overly concerned about other people logging into that machine over the internet (10.0.0.0/8 is a private network IP range and not routable over the public internet, just like 127.0.0.1 or 192.168.0.0/24). Also, it's pretty likely that he changed the passwords or deleted the example user accounts after he made this video, just to be sure (i.e. belt and suspenders).
It would take very little work to determine the password from watching that video a few times.