It's certainly a problem. I don't think Google will, or indeed should, do anything about it though.

I'd like to see routers using the passphrase to generate a long lived authentication token. "Good netizens", as the phrase goes, could ensure their routers / client devices didn't store passphrases without inconveniencing the end user.