Basically because isps don't give a shit about security and usually offer router models with known vulnerabilities.

This is my favorite distribution for hacking wifis, it incorporates a lot of utilities and exploits for known routers.

https://www.wifislax.com