I didn't even know this was a thing, but it makes sense. It's like someone setting up another router on your home network and putting you behind that. You can only make outbound connections. I'd prioritise a better ISP but in lieu of that the tunneling back in over the outbound connection makes sense.