I will give @solarion the *benefit of the doubt* rather than just "shooting him down in flames".
Yes - it is unfortunate that the "default" client doesn't stop you from entering an "empty" password (or a non-secure one for that matter).
As has been mentioned this will be addressed when the "new" client becomes part of the Nxt standard software.
Understand that early Bitcoin versions had even worse problems (gmaxwell has mentioned some of those) so always when using "alpha" software *be very careful*.
Well this has already been solved, I just tried not to enter password in Wesley web client and it didn't let me.
I agree that NRS is to long around. A month ago we were talking that we will have Wesleys web client with incorporated NRS by Jean Luc in a matter of days. Month has passed and still nothing.
I just downloaded today a windows client from Weslehy and it is a thing of beauty. I see it is beta, but this needs to be pushed ASAP as our only official client. I don't know how far are we from the moment that is completely safe, but to me it seems safe. This is a question for Wesley.