Well, I agree that NAT is not proper security, but at least it provided a second layer on top of the incompetence of your average IoT developer.

The so-called smart devices doesn't follow the standard security protocols anywhere close to computers and mobile devices.