OK, the access point itself may not be vulnerable - that might be true. But the connection between a device connecting to an unpatched access point is vulnerable. According to Mathy Vanhoef (the guy...

It has been more than 2 years that Krack became know. Is it ture that an access point which is still sold, still is not patched against Krack? The latest firmware was made 2016. Unfortunatelly...