[jjice]

Without any other experience with this feature of Plex, I would've assumed that they'd proxy the data so it would work seamlessly with NAT and CGNAT setups without additional user config, but I have no idea if that's actually the case.

[vel0city]

They're not really proxying it, but they do assist with NAT hole-punching and you're probably using their authentication system for managing permissions.