NAT was a stop gap measure for the limits of IPv4.
In the perfect utopian world every device would have it's own IP address and the security happens on the gateway router before reaching that device.
In the real world, 95% of business network I see are running IPv4 internally behind a NAT with a single IPv4 external address and using the NAT as a type of port->device firewall. *lol*