[2bitencryption]

what's more secure than a device you cannot possibly reach?

I'll take an insecure device isolated at the bottom of the ocean in a titanium block over a probably-secure device that is publicly addressable any day.

[Spivak]

Your appliance 'router' can (and probably does) run a firewall to give you that kind of control. NAT never really gave you that.