The simplest way of protecting the configuration is to agree upon a password.
Important: If no password has been agreed for the device, the configuration is open to be changed by anybody. For example, your Internet access credentials could be exposed or the router reconfigured to disable the security mechanisms.
Note: Among other things, the power LED flashes on devices that have no password set, assuming that the configuration can be accessed via WAN or WLAN.