Use the panel only on a trusted LAN. Every page and API request requires the router root password over HTTPS. Verify the local self-signed certificate through a trusted connection. Do not forward port 8443 to the internet.
Never attach router backups, TLS private keys, authentication files, passwords, session tokens or full network configuration to a public issue.
Report reproducible problems with the version, router model, firmware and a redacted description. A failed recovery retains private recovery data rather than declaring removal complete.