I would argue Hanlon's razor applies here. I think vendors also have some responsibility. The defaults are bad and the vendors make their devices hard to manag

I would argue Hanlon's razor applies here. I think vendors also have some responsibility. The defaults are bad and the vendors make their devices hard to manage on purpose (for lock-in reasons). I'm looking at Cisco in particular.