And this stops the vacuuming at the router/ISP level how?
DD-WRT does a good job if you use high-security passwords.
I use KeePass and generate a 256-bit password with letters, numbers, spaces, symbols, and ASCII characters. I can only access my router from home by copying the password from the KeePass database on my encrypted thumb drive which is paired to the TPM chip in my desktop which is powered off when it’s not in use.
It’s not fool proof by any means, but if someone really wanted my shit, they’d have to work for it.
This effort is targeted against commercial tracking at the desktop level.
Ah, hah.
You read my article.