Most ISP-issued gateways utilize the TR-069 protocol (CWMP). This allows the ISP to remotely manage the device. If a new firmware version is released by the ISP, the modem will automatically download and install it, usually overnight. This ensures security patches are applied, but it also means that if you manage to "hack" or unlock your gateway, a firmware update can reset your changes or re-lock the device.