TR-069 allows many home routers supplied by ISPs to be compromised en masse (pcworld.com)

Original defcon presentation at http://shahart.al/I-hunt-TR-069-admins-shahar-tal-dc22.pdf

That's why the router my ISP gave me is treated as hostile and placed outside my home network.