There are things you can do in an evil router that encryption and integrity protection don't mitigate. Adding unique delay variance patterns for packets from a

There are things you can do in an evil router that encryption and integrity protection don't mitigate. Adding unique delay variance patterns for packets from a specific set of packets (source address, payload type etc). This makes it easier to detect and follow interesting traffic. You can also copy certain packets, divert packets, inducer errors (to cause resend that in turn triggers repetitions in higher layers that might be usable for info leakage from the protection mechanism. The router really is your friendly, silent mitm helper gnome.