Well, it's arguably cleaner than having a bunch of random
NOPASSWORD_ settings. It's also slightly cleaner in your code to do "settings.NOPASSWORD.get('foo')" vs having to defensively use
getattr on settings all the time in case a setting is not set.
I'm certainly not passionate enough about this to really argue intensely for it. :)