Probably because you used the metaphor of a military invasion and used the phrase "death trap". That kind of talk will get a defensive reaction. That's nothing to do with whether you have a point. It's just cause and effect.

Vendor? This is open source software. It's not proprietary. There is no "vendor".

The reason these devices are cheap/affordable is because of the open source community. The reason the internet has made it to this current state is because of the open source community. If you want the internet to be better and safer you have to roll up your shirt sleeves and contribute in any way you can.

I find it really hard to understand the view that a company shipping a defective product that may cause great harm to users should be excused from responsibility because the bad software choices they made happened to be open source.

I suspect the consumer protection laws take similar views in many countries.

Like I said before, there are a number of available DHCP and DNS implementations in memory-safe languages. Many of them are open source. So the vendors don't even have that excuse.

What are they? I've certainly never heard of them or used them. Are they used in production or are they toys?

DHCP: isc-dhcp or dnsmasq

DNS recursor: dnsmasq, unbound, bind, djb's dnscache, maradns

None of these are written in memory safe languages, but they're the only ones I would trust because they have YEARS of testing and getting the RFCs right.

"Be the change you wish to see in the world."