I can certainly understand how some features in the list would require sending user data to Trend Micro - blocking malware domains, for example. This makes sens

I can certainly understand how some features in the list would require sending user data to Trend Micro - blocking malware domains, for example. This makes sense - and it already happens with all the major browsers. I am less sure why, for many of the other examples in the list, the router can't just receive updates from ASUS/Trend Micro without sending user data abroad. Maintaining a local list of common software and popular services is not that onerous for such a device. People with less common software are not likely, as you said, to be who they are targeting. As I understand the article, the current EULA means I have to give access to my data to a third party if I want my router to receive some useful information (say, mapping) from them. This is information which they could just give my router anyway, without needing my data, in many of the cases for which the EULA is required.