TP-Link has made firmware updates available for a broad range of Omada gateway models to address four vulnerabilities, among which a critical pre-auth OS command injection.
You can install it in the darkest corners of your yard without plugging it in, as long as it gets some daily sun.