You'd be surprised how many routers have shipped with WPS on by default, and without rate limiting. Your 25 character, randomly generated password isn't much help when you can simply try about 11000 WPS PINs and have it spit out the plaintext key to you :)