When I go to 192.168.1.1 it still asks for my login/password/2FA I created on unifi.com. Well, theoretically it's possible router can securely check those locally without WAN, by copying password+2FA init token + salt hashes locally, but I highly doubt it's the case.