Actually it's not really that surprising that remote management is enabled. I've worked for another ISP and we have access to the company given routers that can be accessed via Remote management to check if there's anything wrong with the line. Though this feature is only available to corporate level clients.