this was my initial impression, i don't think you're wild OR optimistic but I don't think it'll ultimately be a NAT like solution, which hasn't really been synonymous with security afaik.