Until you tie it to the internet - at which point you are vulnerable. Just like Wep/WAP - it’s just the time it takes to get through and the skill level required that is the question.
Well, if they get past the router with packet-monitoring then good luck to them. :-)