Still my point is right, NAT traversal hacking is not an issue and is complicated enough to not be practical.
Residential off the shelf routers don’t have firewall for incoming traffic. For business use you always put hardware firewall behind ISP router, I don’t have firewall at home.