Password Not Provided in Initial Link and No Way to See it Entered

I got the email invite to log into Winning Ads for the first time, but it never showed me the password. It also didn’t have a “show password entry” (eyeball emoji) to see what was there when I got to the auto-filled-in login page. So, I could only ever log into Winning Ads if I clicked the link provided in the email. This means, users are given a password publicly exposed on the net (via the email URL), and they aren’t able to change it. I wanted to change my password so I could log back in, and also to protect any data I enter, such as ad account credentials. But, the Profile page of Winning Ads wouldn’t let me change my password unless I knew the original (existing) password, which was never shown to me in the first place. The only way I could figure how to do it was to look at the GET parameter “prefill_pwd” in the initial URL provided in the email. I then had to deduce that the “%40” part of the password was “HTML speak” for the “At symbol”. Then I could copy that into the Profile page’s “Current Password” box, and was THEN allowed to create a password so I could log back in another time. But, lol, I’m guessing that’s not gonna be an intuitive thing to do for most marketers. So, unless I missed an email or message along the way, new users, or even the other initial founding members will ONLY be able to enter Winning Ads from the Welcome Invite email sent to them, and they can ONLY use a password that is unencrypted and publicly shown in a URL (and not currently changeable by them unless they are technically savvy enough). Which means, all their ads and ad account info and any other data entered into Winning Ads is publicly accessible to anyone at the moment.