Of course, it could be perfectly safe, but I've seen too much shitty behavior in this space to trust them when there are less risky alternatives.
An even better way would be to leave the maximum power limit and instead lock the core clock for graphics cards that support it.
This is because most do not have a password.