Comment by datadeft

> disabling NAT results in "exposed" LAN devices

"In theory, theory and practice are the same. In practice, they are not."

NAT was used as a blocking method for all incoming connections for SOHO networks for decades.