It could and likely would be configurable. The problem is the people who plug the router in with the default password and forget about it.

This would solve that while leaving it configurable for technical users.