Earlier quoted context omitted.
That's what a firewall is for, NAT does nothing here.
NAT does nothing? The NAT setup is the reason incoming connections don't reach devices on the LAN. I get that you can phrase this as NAT actually being the thing forwarding the packets, and on a home ipv4 router without NAT the incoming packets would just go nowhere, but everyone is talking about the realistic options of NAT vs device having own public IP addr. I get that an ipv6 router can have a firewall with good…
Indeed, it does nothing. NAT won't stop an inbound connection to your network. You already needed to use a firewall for that in v4.
The type of NAT we're talking about here *only* applies to outbound connections. It doesn't do anything at all to inbound connections.