It's remarkable that we've had secure replacements for UPnP, like Port Control Protocol and NAT-PMP, yet most home routers don't ship with them. If you know UPnP is insecure, you probably know enough to do manual port forwarding anyway. Everyone else? They’re on their own.
