A VPN provider could easily support Port Control Protocol / NAT-PMP without giving each VPN client its own public IPv4.