publicly addressable does not mean publicly routable… your router would still not arbitrarily connect untrusted external devices to internal hosts

NAT has the property of a firewall only as an implementation detail. replacing NAT with an IPv6 firewall in the router is an upgrade in every conceivable way