It’s not only about spying but about negligence. TP-LINK routers were found with many security issues and no patches. Some accuse them of do that porpose but might be negligence. Anyway they really do have bad security