2. No way to block WAN pings IPv4 or 6
I thought they were blocked by default and no way to change this setting. Which is a PITA - one of the first things I normally do when configuring a new router is allow ICMP pings.
Blocking ICMP is not always a good thing, not only does it stop some diagnostics but it can also break path MTU Discovery :/
4. TR-069 - As ejs said, just because port 7547 is open does not mean its vulnerable to Mirai. It also needs to have buggy f/w that allows TR-064 to open port 80.
9. Very basic config options that anyone used to configuring their own LAN will be unhappy with.