Makes me wonder if they could have been setup correctly, but either have their PC, or the device itself, taken over at a later date leading to the AP being re-configured to an open state? I mean, how many home users truly monitor their AP close enough to know a change occurred? Just my paranoid side coming out.
Humm...maybe a research grant for monitoring of new access points in a neighborhood and see how/if they change over time. :)