Even changing the WEP key to something other than the default (while not providing good security against bandwidth stealing) would at least help prevent attackers from obtaining administrative access to the router, but again this information is not provided up-front by AT&T to its customers at the time of installation.This is another example of user security being sacrificed for ease-of-use.