Why not, it worked against TJX, right? Orders of magnitude more likely to find an open WiFi in a bank's parking lot than you are to find a WAN-facing consumer-

Why not, it worked against TJX, right? Orders of magnitude more likely to find an open WiFi in a bank's parking lot than you are to find a WAN-facing consumer-grade router. Any employee in the company could screw up the former ("I didn't get good wifi so I brought in a router from home!"). The latter requires grossly incompetent netsec.