> It would be trivial in that circumstance to blow away any kind of NAT and the pseudo-anonymity/plausible deniabililty it provides and make client devices performing illegitimate activity directly identifiable.

Identifying the device and identifying the person using it are two entirely different things. Multiple people use the same device all the time.