See: NSA Laughs at PCs, Prefers Hacking Routers and Switches | Threat Level | Wired.com
Well yeah, but then again, anything of any value shouldn't be connected to a network that has internet connectivity in the first place.
How many people regularly check their gear for firmware updates?
I do. Everyone else should.
have the means to go out and buy new kit...
There's a difference between "not having the means" and running 10/20 year old obsolete kit "just because you can" or because you're on a one man crusade against Microsoft.
But even if you don't have the means, a little bit of research and a little bit of effort can yield to a better setup system using what you've got.