The vast majority of ISPs provide a “free” (or “delivery charge”) Modem/Router when you contract for service - that is adequate for connecting you to the ISPs network and can be remotely managed by the ISP; your local network security is not their interest. The objective is to provide a reliable connection to the ISP’s network at minimum cost. The Modem/Router is never cutting-edge.
Your ISP has no interest in subsequently upgrading the Modem/Router - unless it generates recurrent new revenue through monthly rental, or enables other lucrative subscription services. As such, for example, when a new(er) WiFi security standard is required by the subscriber (as is your want), they have no interest - unless you were to purchase their new “whiz-bang” ISP provided Router (refer again to the opening paragraph of this reply).
You would receive a new router if you upgraded your service to a faster internet service (e.g., upgrading from “old” ADSL to “new” VDSL - a.k.a. FTTC or FTTP) - if your current kit was not compatible.
If you want full control of your local network and security, the only way this can be achieved is to provide your own equipment. In some cases, if an appropriate Router is acquired, it is possible to replace the ISP Router - but this is not always possible. It is often much simpler to treat the ISP router as a “dumb box” - considered “untrusted” - and provide your own upstream network infrastructure.
TalkTalk is a low-cost carrier - with service and technical features that are commensurate with their service offering.