You are comparing their consumer routers to their business line-up. The management interface for the business line-up can be properly segregated onto separate VLANs to protect it.

Sadly the consumer department doesn't seem to follow the same model as their business department.