The router to ISP connection (which the ONT sits on) is Layer-2 so I would think it does not represent much of a risk.