[rootatixww3]

good approach, but your security should not depend on your router anyway, you should be immune to attacks from it

[bayindirh]

Not exposing your management interface to internet and running a guest network which doesn't have access to said management interfaces can block 95%+ of the attacks, I believe.

[rootatixww3]

yes, defense in depth