I don't know about that. Let's say the router is running a GPL'd light-weight web server. Just because you can't lock the person out doesn't mean that the component may be effectively replaceable.

Otherwise you could never effectively use any GPL v3 software in embedded devices unless you add additional update paths.