Indeed, it's no less insecure than just with the router. Anybody with physical access to the pre-configured AP could also access the physical router...