I admit my cognitive abilities are completely shot right now but...
...how exactly does one reconcile "a secure local network" with "punching holes in the firewall", for fuck's sake? If it's a local setup phase ONLY that travels unencrypted over a hopefully secure local wifi that's still bad enough, granted, but maintaining an unsecure connection that LEAVES the local wifi is an entire different ballgame. So which is, because it's not even that one of you is talking bullshit, it's that the two things are incompatible - it's either one or the other!