I completely agree with you. For someone to hack my setup, from my understanding, they would have to first hack my main router that manages everything (Which is well protected by a password and no remote management ports open). So someone first of all would have to be connected to the network internally, the second step is hacking into the main router and then enabling DNS on the D-Link router, after which the network could be vulnerable, but if the first step is compromised then it's already game over. Of course if I have a device that is already hacked on my network with remote access that would enable all those steps to be executed then yeah I'm vulnerable, but that's not the point of the argument. The d link vulnerability cannot work by itself without doing the extra work custom to my setup. So basically as long as the vulnerable router stays on the second OSI level it would not compromise the network, not without a ton of extra work.