The security of WIFI networks is getting better, but they still need work. Many routers with the default configuration have settings for WPS that limit the number of tries for each PIN attempt. But it is still possible to de-authenticate a user on the Wireless network and then capture a WPA handshake that can be run through a program that uses rainbow tables to attempt to match the WPA PSK and then connect to the WIFI network. There must be a way to stop this from happening. But security is fine if you have a very complicated WPA Pre Shared Key. This should help you out. Another problem is the WPS Pixie attack, this can be used to crack a WIFI network, without the Pre Shared Key. But newer routers should not have this vulnerability. if the router allows many PIN attempts without stopping you, then the PIN could be cracked, but it would take time. But the rate-limiting I mentioned before can make attacks like Reaver obsolete. Greater protection against remote resetting of the router and WPS PIN attempts would be very good, make a very long delay between attempts at guessing the PIN, or better, disable it completely.
WPS is not really needed, just get the PSK and type it in on each device, instead of the lazy WPS way. That would make much more sense. But at least we are getting better at security, slightly at least. But more progress is needed in this department.