I think they were talking about hardware wise. You can remove Windows and replace it with Linux or *BSD or what have you and then patch that yourself on commodity hardware.
Meanwhile, the router both A) Comes with an OS that you may or may not be able to patch, and B) You may or may not be able to replace it with something you can.
You’re not realistically patching Windows without Microsoft’s cooperation.