The technology to convert wifi signals into the placement and identity of people is getting much better. Not by using their devices, just the waves bouncing of their bodies. (There’s nothing new to the pipeline as far as I can tell, we’re just starting to get into the accuracy ranges that make it easy/useful.)
The attacker has to be broadcasting to make the attack work. Running OpenWRT and keeping it up to date probably protects you from someone using your own router against you better than stock firmware.
But another expected scenario is an attacker with a nondescript car and a wifi router inside who can sweep the neighborhood searching thru walls for Person X.
Hmmf, nasty, but labor intensive. Is it working on backscatter ? because your devices shouldn’t be responding much (beyond ping / authentication query level).
Also, at that point they can just use whatever fits in a van, radar, IR scanners, who knows what, fucking X-rays maybe, don’t know that they’d bother with this.
Avoiding it being deployed at scale to everybody’s router might be more important.
Oh, for most usecases I can think of, there are easier ways. For example, by attacking the cellphone the person is carrying. Or watching for their gait on network cams instead of via wifi.
No phone? Hiding inside? It’s a terrrist, prol;ly