Bought a netgear router and a tplink repeater within the last year. All the cloud account crap is only required to use the mobile apps. However they all offer web interfaces directly at their ip addresses. Just use that and bypass all the dark patterns. It sucks that companies feel the need to cloudify everything.
It obviously phones home, and has all sorts of additional exploit angles.
I bet there's a daemon listening 24x7 for incoming connects, too.
Ubiquity ERL already had a security issue with theirs.