Security issue: console history does not clean on reset

i got halfbroken sxt lite2 from friends
when i reset it i just press [up] in console and can see their command
including login/password for pppoe account used on it previously

i try it on hap lite and here same issue

ofcause i ubgrade both to current (6.48.3)

Also on your old 2019 post no one reply:
http://forum.mikrotik.com/t/upgrade-v4-to-v6-webfig/135089/1