There should have never been management access enabled by default via WAN or WLAN on ANY router to be honest. In a misguided effort to make their consumer devices more 'friendly'[1] they've just made them more insecure.
--
[1] Even though most users have no idea the management interface even exists.
It's a tough call. The comms companies who provide my router provide millions of them. They want ACS/TR-069 by default and use it for automated updates.
I always disable it, but I'll bet I'm something like 1:10k in that respect.
--
[1] Even though most users have no idea the management interface even exists.