Is UPNP still a security nightmare in practice? If so, does this article's use of it avoid the usual problems?

It's a "security nightmare" because clients can make holes in your firewall. If you're fine with that, then it's okay.