I am writing a paper right now which involves Wi-Fi security (I'll spare you the details). A major argument in this area depends on the assertion that Wi-Fi routers come defaulted as open networks (ie no encryption of any sort). Basically the argument is that since many users are ignorant of how to set up an AP properly, whatever the default setting is should be assumed as the permanent state of configuration when making policy decisions.
In my experience, I have not seen a router which did not at least come with WEP/WPA password or WPA with WPS enabled by default out of the box. Perhaps they were all open by default back in the early days, but in this day and age it seems that to assume all routers come without security turned on is anachronistic. Am I totally off base here, or does your experience match mine? Have you encountered any sources which could back me up? I'm having a very hard time finding anything to pin it down short of listing all the companies whose routers come with any security defaulted on which is insufficient to say the majority of routers come with security on. Thanks for your help!