Further, updating transport headers and rewriting application payload data, in some cases, by NAT prevents the use of integrity protection on some data streams traversing NAT middleboxes.
This can pose a significant security threat to the application in an untrusted transport domain.