I can’t think of a single time I’ve wanted to connect between two hosts when I haven’t specifically allowed one through a firewall
NAT are not firewalls.