2) These routers were deliberately placed on the internet by people that knew enough about them to do so. If "placing it on the internet" was proof of excellen

2) These routers were deliberately placed on the internet by people that knew enough about them to do so. If "placing it on the internet" was proof of excellent security knowledge & practices, then nothing on the internet would be insecure. Just because they knew enough to know how to place it on the internet doesn't mean they understood the implications of that decision.