Router companies in general can’t seem to get any security right. Between hardcoded backdoors and allow all In rules it’s clear that you can’t trust them.

I’d rather do a custom device with opnsense. Not guaranteed either but at least people contributing care about firewalls so slightly higher sanity levels