Default passwords after fresh install?

When installing Home Assistant to a Raspberry Pi using the image provided on the home assistant website, is there anything you need to worry about with passwords?

As far as i remember SSH is disabled by default, and in order to enable it you HAVE to set a password is that correct? Just want to make sure it is secured

Yes that is correct (SSH and password provision).