You are of course correct, but most people will disagree because the world we live in is a lot messier than what we should do and people expect a base line. You have to remember that people rely on IPv4 NATing for security, despite every network engineer knowing that is it is not - in effect it is.

> You have to remember that people rely on IPv4 NATing for security, despite every network engineer knowing that is it is not - in effect it is.

Then buy a device that does default NATing and other consumer-y if you want that. Don't complain that a generic routing system routes IP—whether IPv4 or IPv6—by default.

If you want a firewall buy a firewall. If you want an all-in-one firewall/gateway/AP/whatever, buy it.

In this particular case the "problem" is not in the device but in purchasing the wrong tool for the job at hand. If you want to haul lumber buy a cargo van or pickup truck, not a VW Golf.