Many routers sold use their own serial number as the WPA key though, and have a lot of the serial number in the default SSID. It's something I'm constantly telling my friends to fix.

You're implying that the password is the same as the SSID?

Yes.

http://www.hakim.ws/st585/KevinDevine/

The same applies to many brands, not just the one in this example.