> with their giant scary black box ONT, and am consistently paranoid of what it is attempting or is doing on their network

But is this different from network equipment deployed somewhere, where you don't see it? There are AON networks that are just a PON behind the scenes but you don't see that.