Re: UPnP - insecure out of the box
"Tempting, very tempting. How about a reverse walled garden approach where those without a license are locked into a small subset like only facebook and twitter or something?"
Obligatory car analogy
This all reminds me a little of self-driving cars and the road network. People who can't drive are not allowed on the roads but self-driving cars might one day allow people who can't drive out there. uPNP is the self driving car of the internet "superhighway" that allows non-"drivers" out there because it takes away the complications so they don't need to learn to "drive". The downside is that uPNP doesn't put lives at risk so anyone can create their own shitty implementation with no come-back when it fails.