@BigW3260 I'm concerned, but for the time being I'm trying to give TP-Link the benefit of the doubt. Seeing as we're sort of hostages for the time being. 😓

  @BigW3260 Same. I kept my last router for a decade (Netgear r7000), so it would be nice if my 3 XE75's last at least 5. 

  @WYLDSTALLYNS 

unfortunately I too am locked in with a very expensive tplink wifi 7 device for my home network. If proven to be a threat, I would lose a lot of private stuff to CCP hackers.

already thinking of switching over to Netgear or any other non chinese brand.

hopefully its nothing but based on historical evidence, its likely to happen. 
 

note that any security vulnerabilities of chinese companies are required by the CCP to be reported to them first before being made public.

  @gemballa I keep all computers that need privacy away from the network/internet.  I think I learned that from a Mission Impossible Movie or some other one similar.  I keep a Ring Camera facing it and will go ask Mr. Cruise for his autograph if he comes to steal info from it.  Haha...

  @BigW3260 But in all fairness and jokes aside, TP-Link has set up a brick and mortar space here in California, just like Toyota used to have as well as Tesla.  If Toyota, Tesla, and others maybe that I am not aware, have moved their US headquarters out of California, then that is a sign that TP-Link is committed to it's US customers, however how hostile/strict California business law/requirements may be.  (This includes California requirements on privacy, whatever they may be).

  @LarsVin 

Exploits are puiblished, (CVE's) and many 'vendors' will have these identifucations or thier own (Dell calls them DSA, Dell Security Advisories, and lists them on Dell file updates, like BIOS for the PC's). I think some have been listed on TP-Link F/W releases even. See LINKS below.

However, the root problem is NOT then KNOW vulnerabilities but the UNKNOWN ones... some waiting dormant for the proper command to work, and what they could send somewhere without you knowledge. Even be turned on to capture your TCP/IP traffic, or use your computer for nefarious purposes.