ISP routers are also a security issue, when that PHP thing happened I had to go through all my stuff and find what was vulnerable and either update it or replace it, luckily nothing on my firewall was affected. When sshole was the big scare I went and looked everything up on it to make sure I was not in trouble, I wasn’t I use keys with password authentication turned off, but that got me thinking I should see if there are any updates for my firewall. Turns out there were a few, I had never thought of updating a firewall before because the only times my ISP firewall would have been updated is when I broke something and the IT people would just decide to do their thing and break all of my configs, there may have been updates with that.