If you're talking OpenWRT, then I totally agree. But something like Asus Merlin is a relatively easy change and still provides additional protection. While part of the Asus code is closed-source, most is open-sourced and Asus has implemented improvements developed by the Merlin team. This shows Merlin knows what they're doing and are trustworthy too.