Nighthawk RAX40 security setup is terrible

I am interest in information security, and I brought a AX4 router.

I turned off Remote Management setting and want to ensure internet could not access my web management interface.

The setting pages shows it should be port 8443.

Anyway, I just turn off this function.

And, I did a port scan from internet to my router.

I found lots of interesting ports are open!!!

Some port are  using https.

for example, port 58631.

I connected to this port by https....it show a login page.

okay, i tried to login by my credential...

success...this is a remote management port.....

It should be turn off!!!!!

okay, I use the block service, block this port, for all IP, always..

The block function doesn't work!! I can still connect to port 58631..

It seems this router are full of vulnerability and backdoor

How come netgear would allow this things happen?