I'm partly with you - they don't seem to know what the initial vulnerability was, so just blocking this version of the malware is not sufficient; but by the sam

I'm partly with you - they don't seem to know what the initial vulnerability was, so just blocking this version of the malware is not sufficient; but by the same token, they'll want to at least find out what the vulnerability was and have a fix before advising consumers replace modems. Clearly, we need laws outlawing the cheap-ass modems we know have and mandating far more secure, easily firmware-updated ones.