[PeekPoke]

So your ISP has the capability to automatically provide you with updates to fix security issues on your router (thus helping keep out the 'countries in the East') and you want them to turn this off?

Smart.

If you're really that paranoid, I suggest you open your wallet and buy a firewall to put between the LAN port on your router and the rest of your internal devices.

[d43594]

Yes. How can I be assured that their mechanism has not, and cannot be compromised? I can obtain updates through their website. I should be able to register for notification when updates are available. Why would I want to allow remote access (even to my ISP) which I cannot monitor? Moreover, why would I want to (potentially) allow (whoever has access) to install whatever they want on my router?

[mooism2]

If you don't trust their update mechanism to remain uncompromised, why do you trust their website to remain uncompromised?

[d43594]

I could buy a Firewall, but why should I have to?

[mariuolo]

To keep control of your bastion host.

That's what I did, I even disconnected the antennas from the ISP-supplied router.