Could you specify how the risk posed by TP-Link devices differs from those from let‘s say D-Link.

A question, just to understand that right. You say, to make this strategy worthwhile, you have to place *2 firewalls* in-line at every point where you now have only 1. Correct? You can't just replace half of your firewalls with firewalls of other vendors?