Some of the bullet points under "Users should consider the following lessons" are Timely update your device's firmware, and Do not port forward your devices. This should for the most part should sum up why they get hacked. The back door wasn't broken, it was already open.