Guys I mean it, i just bought a brand new fiber router (AVM fritz.box) and the first thing firefox would like me to do is to switch to the http version of said

Guys I mean it, i just bought a brand new fiber router (AVM fritz.box) and the first thing firefox would like me to do is to switch to the http version of said configuration page. Chrome lets me add an exception for the box itself, but really how many end user do you know that will not click on "take me to the http version(unsafe)", when talking about their home router? So given the fact that I am in your wifi, One could use dhcp (if active) for MITM attacks, grab the router password and install tracking daemons right on top. Next step would be to forward the dns requests to one of mine so I can build a map of what sites you use and from there all I have to to is to make you accept an insecure ssl cert and done?