Addendum: I only just noticed this this morning while still cleaning up, and it seems like they changed the WP version to 2.5 in the database.
I’m logged into a site I know is still running 2.1.3, but the footer in the admin panels say 2.5 now. I still haven’t found a clue about this invisible user “WordPress” with no info about privileges, though.