The OpenWrt build-poison scare reveals why router firmware supply-chain security matters for smart home and IoT users.