None of the vulnerabilities are WAN side, which means that the average home user won't be affected by them. However, it also surprises/depresses me that there is no auto-update functionality.
Vulnerabilities happen. Architecture and secure design is critical. However, your patching and remediation strategy is what counts in the field.
I should add "the average home user 'likely' won't be affected by them". There's a couple of reasons for this, but it's still not a good enough reason to warrant allowing this kinda thing to continue to ship