On the one hand, it's lovely that WordPress is so successful that a million and a half sites advertising it as a spam magnet could be seen as insignificant. On the other, is there really no issue with that figure becoming two million over the next months and years?
Is there any point in my submitting a patch to turn comments off for the samples? I cannot see there being a flood of 'why aren't I getting comments on a post I didn't write?!?' complaints.
We do have different views on the responsibility to people who don't read docs. At the moment, WP is like a copy of Windows XP - unsafe out of the box. I think it should be better than that.