Some firewall allow upnp to be enabled for specific devices / IP addresses.
Look, security is something that makes us feel better at night. Like locks on our doors. It's not going to stop someone from breaking in via a window but bricking up the window blocks the view. Is that a builder problem? No.
Enjoy the view, have your hub lock the doors at night and rest easy you are miles ahead of most.
Nash's principle of equilibrium is in full effect. Don't make yourself the weakest target but also don't pretend to be Fort Knox.
In a previous life I had a client that did security testing so they built a fence around an empty piece of property and pointed cameras at the center. You'd be shocked at how many people tried to breach the fence. Just to get in.