Keith, I don't get this argument. A NAPT is a firewall by your own
definition "I believe the primary purpose of firewalls should be to
protect the network, not the hosts, from abusive or unauthorized
usage." It's implementing a very simple policy, protect me from the
outside world.
NAT has problematically constrained policy capabilities.
Melinda