[testTED]

There's a difference between pressing "update" in a known-compromised device's webUI, and flashing it from the outside.

[omgwtfbyobbq]

The advisory stated affected devices could be update through the device UI.

https://kb.netgear.com/000061982/Security-Advisory-for-Multi...

But if it didn't, then that's another can of worms.