I still don't have an open NAT type after enabling UPNP

I'm confused why the option is even there at all then if they are just going to disable it without my consent anyways, I'd heard the return to being disabled was a firmware bug.

The problem with individual port forwarding is that I have to enable that for every individual game that I play, and also have to hope that I can find out which ports I even need to open. UPNP is far more convenient. I've also seen mixed opinions on just how much of a security risk it is so idk.

I guess the only solution then is to just get my own modem and router that won't disable it.

That's of course your choce but it doesn't change the  fact that it is still  a potential security issue. 

Thank you for reaching out to our team with that question. @EG is correct about the security aspect of that set up. If you need us to look further into your account, or make any changes on the service and equipment we are happy to assist you from here. 

I'm a little confused by this conclusion, since surely if UPNP is a security risk then using port forwarding manually is also a risk too. Either way, it seems like that's the way it is.

I'll do some research on if I should get a seperate third party router. If I do, then I can just put my Xfinity modem into bridge mode correct?

@user_miq0ha​ wrote;

I'm a little confused by this conclusion, since surely if UPNP is a security risk then using port forwarding manually is also a risk too. Either way, it seems like that's the way it is.

UPNP opens up the entire world. Port forwarding only punches one hole in the firewall. That is far safer, no ?

I'll do some research on if I should get a seperate third party router. If I do, then I can just put my Xfinity modem into bridge mode correct?

Correct.