WEP has been effectively useless for years. The kid next door can crack it in half an hour with a standard PC.

Even when people have WPA2 enabled, they use laughable passwords. "Fluffy" is not a solid password, and neither is your home phone number.

People don't do firmware upgrades to their wireless routers either. Yes, it's a hassle once you have everything set up because it erases your settings. But there are usually important security upgrades in there. When I was setting up my brand new router, I was amazed to find that the firmware was a year and a half out of date, and four significant firmware upgrades/patches had already been issued.