>>>>rebooting is better most of the time. If you have not checked for firmware updates, after fresh reboot (best done disconnected) is a good time to enter the router software, reconnect router to the net and check for updates.
>>>>There HAVE been some problems fixed recently in some router models.
>>>
>>>Now THAT opens a can of worms. Routers are computers (often Linux-based), and like any other computer, should be periodically updated. Many residential/consumer routers quickly go out of support; many are never updated throughout their service lives. That makes them juicy targets.
>>
>>Have I been too poooolite ?
>
>I'm sure you're well aware of the security implications, but many are not. For lurkers there's a good overview at https://www.howtogeek.com/205299/how-to-ensure-your-home-router-has-the-latest-security-updates/ .

I still follow traditional onion layered concepts, partial trust in NAT, DMZ, sub-nets, dedicated VM for casual browsing, home and internet zone.
But most of that is to keep paranoid mind set well trained plus deter script kids and casual attempts - for stuff really necessary I now have small airgapped cable only net of machines desktop+2 laptops where WiFi is disabled and which will not be plugged into any kind of foreign net, another laptop that is used at home connected to the connected net which also runs the WiFi nets for mobile devices and this machine is allowed to access nets abroad (often via dedicated VM).

Only sneaker net access via USB discs and sticks to the trusted laptop and offline net For online banking verification via offline airgapped component.

Data store growth is well beyond growth of personal safety needs, even with document scans and email possible to put everything on USB sticks. Still not paranoid enough to carry 2 laptops - unplug and disable WiFi before accessing secure USB catalogued as "safe enough", similar to using 3rd party machine and save results onto "unsafe" external store to bring home.