All end-user PCs have been behind NAT since the late 90s unless the system was a dialup straggler. Enterprise users raw-dogging the internet only have themselves to blame.
And with IPv6 all my devices could be publicly addressed but I've enabled a firewall to block incoming traffic at the router level.