This is a great feature to get started, but it's unfortunate that the "ssh" file hack doesn't set up SSH keys and disable password auth, or at least change the default password. That must be done manually. I dread to think how many Pis are out there in this configuration.
I hope that in future, a proper/official headless image will be provided, to provide more sensible defaults. Until then, I made a little tool to patch the Raspbian images to set things up this way:
Sorry, I didn't mean to imply that it leaves the pi in a ready-to-deploy stage. I just meant it lets you get into it so you can configure it, which you otherwise need a keyboard or wired NIC for.
I hope that in future, a proper/official headless image will be provided, to provide more sensible defaults. Until then, I made a little tool to patch the Raspbian images to set things up this way:
https://github.com/adammck/headless-raspbian