[ggm]

This. NAT is not a firewall, never was. incidental benefit, which can't be relied on, specifically when there's no NAT (most v6)