> Having my network as a non-addressable space with outbound-only connection forming is a positive for me and I suspect many people. Most of all, it's probably

> Having my network as a non-addressable space with outbound-only connection forming is a positive for me and I suspect many people. Most of all, it's probably an illusion. Your web browser has access to your local network, and you probably allow just about any software into your web browser. Yeah, sure, same origin policy and all that. But that doesn't help much with insecure devices or generally crappy software. A stateful packet filter at the boundary to the public internet still would be a good idea, just without the NAT (which mostly causes complexity, which, if it has any security effect at all, makes it much harder to reason about the correctness of your firewall).