That&#x27;s certainly true of servers, but it&#x27;s way less important for the limited set of services a router typically provides. Aside from the services that really need root because they&#x27;re changing system settings, you&#x27;ve pretty much got just dnsmasq and hostapd out of the box. Isolating them is nice if you&#x27;ve got the storage space for that extra complexity, but it&#x27;s not like OpenWRT is a massive attack surface with gaping holes.