[tekklloneer]

No, it's a bug. A home/consumer router isn't targeted at power users, and should not require the average user to understand what they're doing.

I also think it's unreasonable to expect people to patch bugs in consumer gear they've purchased.

[anarazel]

I don't think those goals are actually contradictory. Cryptographically verified auto updates, manually acknowledged non signed file upload updates can coexist peacefully.