I think the installation instructions need to indicate more clearly that the setup.php (and perhaps the upgrade.php file) need to be deleted after installation is complete.

Have you deleted yours?

This is actually not a requirement, since the same login procedure for the administrator is used for both of those.

However, If the plaintext username/password aren't secure enough for you, feel free to delete them for extra super security.