This is concerning. The FCC moved to deny authorization for new foreign-made consumer router models. That means upcoming models can’t legally be imported or sold in the U.S. It also issued only a temporary waiver allowing firmware/security updates for already-approved devices through March 2027. That creates a potential update cliff unless extended. Hardware trust isn’t a one-direction problem. Snowden documents described NSA “interdiction”—intercepting networking gear in transit, implanting surveillance tooling, then resealing and shipping it onward. Even Cisco publicly complained after those revelations. Snowden’s operational takeaway was basically: • minimize trust in vendor firmware • prefer open-source firmware where possible • segment your network • assume routers are hostile infrastructure • disable remote management • encrypt above the router There’s another issue: many privacy-friendly routers are foreign-made. Devices commonly used for OpenWrt and auditability—like GL.iNet_ models (Beryl, Slate, Flint)—are manufactured overseas. "American” brands don’t necessarily solve this; companies like Linksys are foreign-owned and build hardware abroad. Routers are inherently high-risk supply-chain devices—regardless of origin. This policy doesn’t change that reality. It just shifts which supply chain you’re being asked to trust.