Correct, remote administration is disabled by default. Although still not truly secure, recent linksys firmare allows you to change the remote administration listening port - so if you have to have it, you could change the listening port to at least make it more challenging.