It's so bad the ISPs with CGNAT actually protect their users by acting as a sort of firewall...

So glad wireguard exists. It just drops all packets unless I authenticate with my cryptographic keys. It's like the computer is not even there.