You can turn the customer AP off; however, the Comcast Customer Shared WiFi is always on. This is true even for Comcast Business accounts. You're expected to be a hotspot for their other customers.
Which is one of the main reasons I bought my own modem.
Is this true if the modem/router/AP is in bridge mode (so acting as just a modem)? They would have to essentially provision 2 IPs per customer in that case, I wonder if they just don't bother.
You can turn off the shared hotspot: https://www.xfinity.com/support/articles/disable-xfinity-wif...
for comcast business you can get the modem that doesn't have wifi at all.
just dont buy any device form comcast!
buy your own DOCSIS modem from Amazon and your own wireless AP. Separate AP is needed, because Comcast has some form of control over DOCSIS modem (they can reboot and send config to your modem)
problem solved