Xfinity (Comcast) is uploading their own firmware to my netgear which I have purchased on amazon. So one may (rightfully) assume that they have their own backdoors there too; otherwise why would they bother doing that.
But how do they do that? Doesn't this require basically root access to the router? If you give it to your ISP, then the router is ISP's as much as yours, until they cut your root access off %)