Yup, their idea of security is pretty poor.
The router sent to me by the ISP is completely preconfigured including my username and password for the Internet. So, just a case of plug it in.
There is no admin password by default, and the router config is accessible over wi-fi.
The default...