Hi Dan,
Cisco SDWAN is made of multiple components
Controllers: vBond, vManage, vSmart (These are all virtual machines that can be deployed either on prem or can be hosted by Cisco for you)
Edges: vedge, cedge (These are the sdwan routers, can be eit...
I wouldn't recommend to disable password recovery
Basically if you lose the password that switch will become a nice paper weight
no system ignore startupconfig switch all config-register 0x102
Those 2 commands are enough