People here claiming "stick the ISP modem in a microwave oven, put on a tin foil hat and use your own device" -- do you truly, 100% trust that nobody but you has access to said "own" device?
Start by implementing AP per-client authentication for Wi-Fi client devices.
Start by implementing AP per-client authentication for Wi-Fi client devices.