Wndr3800 open remote mangement access

[langenet]

I just installed my new router and configured it for remote access only to find in my horror, that remote management is fully open.
I have set a password even the password recovery option and in no way am I prompted for a username and password.
I'm not new to routers and have had many in the past 20 years. What gives with this????

Rob