sometimes being a security hipster pays off

from here

true story - it looked like a train wreck waiting to happen so i've never actually used UPnP because i've never left it enabled