Sufficiently advanced incompetence is indistinguishable from malice
https://www.dslreports.com/forum/r31901625-New-BGW-210-700-Firmware-1-5-11
AT&T is routers are now blocking 1.1.1.1 after a firmware update (which just so happens to be Cloudfare's DNS service)