Yeah, but those all implement a general-purpose firewall, whereas the consumer routers are explicitly single-purpose things, and they have no desire to make that sort of stuff work. It's not that it's an impossible task by any means, but it is significantly more complicated than not doing it.