I know it's the norm to criticize the admin, but I don't think its what they're saying. I think they're saying "they know of the vulns they leave in and only fix them after it's been exploited by their states".

Not that any consumer router is super nice and safe, honestly, you're better off making your own these days.