Provided are systems and methods for secure provisioning of consumer network services. For example, there is a broadband modem for secure provisioning of a network service, where the broadband modem includes a controller having an embedded memory. The controller is configured to enable an unmanaged interface of the broadband modem, to establish a subscription interface link over the enabled unmanaged interface, and to download, over the subscription interface link, a subscriber firmware enabling a managed interface corresponding to the network service. Power cycling the broadband modem erases the downloaded subscriber firmware and disables the managed interface.