More solid advice regarding home internet/ISP routers: https://www.tomsguide.com/us/home-router-security,news-19245...

Try to avoid the cheap bundled cable/fibre/DSL routers that ISPs "throw in" with their plans/packages.

Disable the remote management/update/TR-069/CWMP/SSH/etc if you can. You don't wanna trust someone else to secure your home.