Routers, cameras, and smart devices ship with default passwords that are listed openly online. Changing them the moment you set up a device closes one of the easiest entry points attackers scan for.
“A default password is a password everyone already knows.”