Since you need a DOCSIS modem box and a router, I would suggest people put a router box you fully control behind your ISP's DOCSIS brick, and just assume the latter is compromised continuously.
I use pfsense on a usb stick in a little box with 2 ethernets.
I use pfsense on a usb stick in a little box with 2 ethernets.