It probably does STUN but not TURN and relies on the actual data going through P2P, that's what most services that are free do and for a lot of orgs/cases it works pretty well.
That part isn't really correct? Most firewalls block incoming connections not outgoing ones so both parties agree on a port, hole punching happens and then there is a connection is formed.