I personally wouldn't. I know enough about networking that I can manage my own equipment.

My Dad, on the other hand, will probably just pick a random WiFi encryption scheme because they all look the same and end up with WEP. He'll also make his admin password be "password" because it's easy to remember and rather clever.

Can an ISP detect this behaviour? I believe that TR-069 ISPs can, otherwise, no.

Is there some reason you can't configure it for him?

The majority of kit in the UK is shipped with WPA encryption enabled these days, and little cards giving details of the Wi-Fi key.

If people decide to turn that off, or decrease to WEP that is their choice.

NOTE: Recent hacks have usually been not about Wi-Fi issues, but admin passwords and some providers e.g. BT have different random passwords for the admin side.

And by and large most providers who supply kit supply it in a reasonable mode for Wi-Fi security.

TR-069 is used mainly for:

1. Initial setting of user's BB creds.
2. Force feeding firmware updates.

It wouldn't be used to overide user configured values.