All routers have software vulnerabilities. It’s probably just poor programming and the cheapest routers are worse (TP) than more expensive routers. So the most expensive routers are better.

My guess is the ban is because the bad actors are Chinese and this is a way to punish China.