Many cloud providers (the cheap ones in particular) will put patches on top of the base distro, so sometimes root always gets a password. Even for Ubuntu.

There are ways around this, like proper cloud-init support, but not exactly beginner friendly.