The router having cgminer installed is actually a firewall. Do you consider it to be easily hacked?
It depends on how you configure your cgminer, if for example for remote management and monitoring you have enabled "API Allow" to have more than the default: W:127.0.0.1
then you open up yourself for trouble...
And who knows what other backdoors are installed by the NSA into the project ;-)