Bet he's popular with the IT team.
They are usually fairly secure out of box, but they certainly need checking. Firewall routers aimed at home users are going to be more slack (more convenient) and thus need a once-over by someone who knows what they're looking for. Default passwords must ALWAYS be changed.