

The most basic solution would be a SSH reverse tunnel to a VPS outside. Have a machine in your network establish that tunnel and set it to reconnect automatically. Now you can SSH into one box of your network. If the router acts up and factory resets (as long as it reestablishes the connection), you can SSH back into your network and reconfigure everything from there.



Ah, that clears up your misundestanding. You misinterpret the second paragraph in Article 14.
The second point of Article 14 is not about “you lose your right to asylum if you perpetrate a crime”. It is about “you cannot claim asylum for the prosecution of a crime”. So if they were e.g. commiting murder in Afghanistan, fled from there and claimed asylum in Germany, because they were prosecuted in Afghanistan for said murder, they had no right to asylum.