my ONT (Verizon) uses a proprietary single-stranded Layer 1 fiber protocol. So, even if I found a device with fiber SFP, it wouldn't connect to their fiber cable
my ISP carries: phone, Internet and TV on 3 different wavelengths on that proprietary fiber
In the United States, this is still considered inside the ISP's network, the demarcation point IS the ONT itself
If you're trying to flash an ONT with OpenWrt, I don't know of any devices that have been hacked
Yes, but on my ONT, only one MAC is recognized to get an address via DHCP, so be careful. I sniff by mirroring the WAN port to another port on my device - then run Wireshark on that.