This is not an apple issue. It’s a TP-Link firmware issue. I returned the device with weak mixed mode security and bought another extender that allowed me to change my security to at the least...

@Mobial I agree with @VCBaldwin since these are creating new networks from your routers WiFi. You can name your SSID's totally separate from your regular router and use the provided encryption...

@Tony thanks for the response but you can virtually spoof the pyhsicsl WPS button press. I would own this network in a Pentest. Since I do own this device I will submit a POC to your security team....

WPA2-TKIP is very hackable. So is WPS connectivity. These are searchable in an IoT search engine (Shodan). WPS is hackable in 5 seconds. Your guides show the ability to disable WPS but I see it...