Thanks so much for helping out! Yeah I'm strongly considering moving to 386.7_2 until Merlin can circumvent the NVRAM issues, hopefully in 386.11.
WAN remote access was disabled, SSH access was only enabled via LAN (with port changed), and admin access was HTTPS only. The router admin page was...