When a user has no password and a polkit authentication is started, instead of blindly initiating the admin session, the regular "Authentication Requested" dialog is shown (but without the password entry). This means that the user's admin session is only effectively started after the user chooses to proceed with the authentication which provides an extra confirmation step that can be vital for critical tasks.