People grow up with (CG)NAT and mistake it for a firewall.