So you trust the ISP to implement CG-NAT properly when they can’t manage to secure a simple CPE router?