The fact that disabling background scans reduced crashes but didn't eliminate them suggests another internal scan path may still be active. Since the same binary appears in all TP-Link packages, I'd...