> Somebody can conceivably receive significant financial damage though. Why they shouldn't be liable?

Not just financial damage, the owners of defective routers can be targets of criminal lawsuits if their connections are used as proxies for attacks, death threats, bank fraud, etc.