[ytqaz]

You specifically requested to be outside their CGNAT, and now look at your CPE, wide open to the WAN.

[JorgeGT]

"Orange's CGNAT, at least better than our compromised CPE" is certainly catchy PR.

[voidwtf]

Ehm, what?

So you trust the ISP to implement CG-NAT properly when they can’t manage to secure a simple CPE router?