Re: Nat as a security measure
"NAT does not make anything more secure, "
NAT makes for better privacy. The use of IPv6 without any NAT is likely to make each device in your site uniquely identifiable by its global address.
IPv4 NAT with PAT makes an external network capture very difficult to correlate with an internal device. Only the router/firewall doing the address/port translation knows which of the many temporarily assigned ports on one external IPV4 address - are mapped to which internal device's local IPv4 address.