If i remember correctly it is Indeed quite a problem about UPnP and in fact one of the first things I switch of if I get to setup a new hardware router. Being in that buisness tough and having seen some of those hardware routers internals, I'd have to say you probably want to be extra careful with those routers at all. For example, there is a recently discovered flaw in Linksys routers that will allow someone to forge a link which silently reconfigures your linksys to turn the firewall off if you have your config website open at the time you click the link.

Guess people have to realize that they won't be save by default just because they bought some nifty little box to route their traffic to the net. On the other hand, the amount of knowledge being required to get into a fairly save security setting for the net ain't ever going to be gathered by any non-geeky individual.