> The RFC for NAT was extremely specific: this was only about creating more addresses, NOT security.

It should also be noted that "NAT" is not some monolithic thing either, there are three 'major' varieties:

* https://blog.ipspace.net/2011/12/is-nat-security-feature/