that’s a possibility because firmware signing and authentication is not implemented by these devices. On Linux devices the patch would be to simply get rid of wps_monitor, which is only in charge of WPS/WSC anyway.

On eCos you could do it through binary patching so the WPSM real-time task is not launched. I’ve heard of ISP doing that when Cable Haunt was released. Not sure all of them would be okay with this given the risks of pushing a really bad update.