The documentation for installing the router app uses http:// for downloading scripts; this is trivial to exploit as man-in-the-middle attacks and make malware injection possible with escalated privileges. It should be switched to https://.

The install script itself also uses http:// to download the VyprVPN .tar.gz file, which is again exploitable and uses no checksums to check integrity.