https://old.reddit.com/r/hardware/comments/tbthjj/psa_newer_tplink_routers_send_all_your_web/
Wow, good to know. They say it's an AV feature that checks for malicious traffic. lol Of course it sends the data whether you have the av set up or not.
TP Link is now permanently off the list and I used to like their stuff.
Story getting traction:
Beware: TP-Link routers apparently sending customer data to Avira without user consent - Neowin
https://www.neowin.net/news/beware-tp-link-routers-apparently-sending-customer-data-to-avira-without-user-consent/