Also, use two routers in serial. One is provided by my isp, the other is my own. The chances of both getting compromised at the same time are lower.