My guess is that, at least, some router ssh implementation is insecure, possibly not by accident.
From the slides:
Page 19: "SSH [...] Potentially recover user names and passwords" Page 36: "SSH - often have router configurations and user credentials [...]"