But serial serial numbers would turn one password into a small handful, not that much better of an improvement.

A lot of routers come with random, long passwords printed on them as the default. No reason this shouldn't be standard.