You think it is going to blow people's socks off that a router provided and controlled by an ISP is accessible by that same ISP? Huh?
The Huawei SSH key is a little strange, but depressingly common for network equipment, even big names like Cisco[0].
[0] https://tools.cisco.com/security/center/content/CiscoSecurit...
There’s an understandable reason for this: the isp’s staff aren’t necessarily any more competent than the isp’s customers (some are, but there are so many ISPs that I suspect they are now a small minority). So just at the isp wants to be able to reset your interface devices remotely, so will Huawei and Cisco support for the ISPs themselves.
I am not implying that “understandable” means “justified”
Even? By now Cisco having hardcoded credentials and glaring security fuckups is a meme.