If a user logs in with device id, and then links their device to Facebook (essentially creating an account with no entered data), the ability to set their username/display name without adding a password is needed. Adding a password would then defeat the purpose of having the Facebook linking.