D Link Dir 825 Firmware Hack

I have read that TR-069 can give hackers an opportunity to hack into your router. This week I woke up one morning and could not read my newspaper. I found a ping time of 4000 ms to my default gateway at my ISP! Like every time, now and then, I had to reset the router. Don't know what you guys think?
1. Log in on the router, check in Summary what is your current firmware version.
2. Go to System /Configuration and make a backup of the configuration.
3. In Advanced, observe if TR-069 is enabled or not, and whether you can Disable / Enable.
4. Go to www.dlink.co.za and search for DIR-825. When you see DIR-825 (G1) AC1200 Wi-Fi Dual-Band Gigabit Router, click on it and then click Resources. Click the Download Link for Firmware, it will take you ftp://ftp.d-link.co.za/DIR/dir825%20(new)/firmware/.
5. There are 2 folders, one for BlueWhiteGUI and one for OrangeGUI. I took the BlueWhite. Download 3.0.6 and the others if you want, in case you want to downgrade. Then open the Afrihost subfolder and download 2020.08.18-17.27_DIR_825AC_G1A_AFRIHOST_5.0.1_release.bin.
6. Look at the backup you made in (2), see it is a file ending on .tar.gz. If you are using Windows, install 7-Zip.
7. Open the tar.gz file and see a tmp folder. Extract it somewhere on your drive. Open tmp, open etc and open default. You will see a config.json file.
8. Open the config.json file in a text editor. Look for a section 'tr069'. Some lines down, you will see 'enable' : true. Assuming in step (3) you saw it was Enabled and you want to disable, change true to false and save the file.
9. Now you want to put the tmp folder with subfolders into a new .tar.gz file. On Windows you can open 7-Zip, create a new tar-archive and add the tmp folder to it. Then create yet another (gz) archive and add the .tar file into it. On Linux I did:
> tar -c tmp > new_config_tr069_disabled.tar
> gzip new_config_tr069_disabled.tar
10. Disconnect the cable from your DIR-825 to your ONT (Fibre box). (Otherwise I think it connects to the ISP immediately and enables TR-069 again.)
11. In System / Configuration, load the new tar.gz file you have made. When the router is back, see if TR-069 is now disabled.
12. Better be connected with a cable now! I will not discuss how. Go to System / Firmware Update. Under Local Update, click Choose File, look for the 5.0.1 file, and upgrade.
13. Check your Firmware version in Summary and check if TR-069 is still disabled.
14. Remember to connect the router to the fibre box again. Your internet should be restored. You may want to create a new backup file since you are on a new firmware version.
Actually I created my new json file in 5.0.1 then restored it in 3.0.6, which is not good practice, yet it worked. That is because I tried to load it in 5.0.1 but TR-069 stayed enabled, but I did not disconnect from the Internet, so out of desparacy I downgraded to see of TR-069 maybe comes disabled by default in 3.0.6.