Firewalls, both at the perimeter and locally, was what patched over this. NAT had nothing to do with it.

You can have firewalls with no NAT just fine. You can also have NAT with no firewall.

NAT is not about security and never was. It's about stretching the IPv4 supply and allowing each endpoint to just get one precious V4 IP.