At the very least it looks like it is now essential to manually secure your router from firmware backdoors:

http://cryptome.org/2013/12/Full-Disclosure.pdf