[Kushan]

Actually I'd be surprised if there was such a vulnerability. It's relatively trivial to completely separate two networks, the hard bit (that's prone to error) is when you try to create secure bridges between them.

It sounds as though there's two completely separate service flows live on the UBR for each hub, there's nowhere to "Cross over" except deep inside Virgin's network and that would have much, much bigger consequences.

Or, as alluded above, they'd have to find some kind of exploit in the hub's firmware that allows them to access say the WPA information of the home network - again, that would have bigger consequences and Virgin can push out a security update fairly quickly. The fact that updates are so rare says quite a lot about the security of the hub.