>> Why don't we have simple web servers that offer secure admin interfaces that can be plugged in for various products?

Agreed

>> It's not as if the user interface for a router's configuration is bleeding edge technology.

Not sure I agree. Have you seen some of these modern interfaces? They are doing deep packet inspection, providing many different visualizations of usage, geo-location, captive portal, ... the feature list - and attack surface - is huge.