I tend to agree. And in terms of being used for DDoS attacks etc., that's really an issue that needs to be addressed by ISPs, who supply routers to the vast ma

I tend to agree. And in terms of being used for DDoS attacks etc., that's really an issue that needs to be addressed by ISPs, who supply routers to the vast majority of non-technical home users. ISPs should be setting appropriate defaults, setting unique passwords, and issuing automatic firmware updates over the air.