As a best practice, the creation of a user's password should be managed by the platform. Setting a password programmatically increases security risk and, in most circumstances, isn't required.

Increased risk of data breaches, financial loss, and reputational harm. Eroding customer trust and confidence.