Most people (as in 99.999% of the planet and rising) have absolutely no idea how to configure a router. There is a reason why just about all networked software uses upnp. Now if you are a power user, or want complete control just disable upnp and config port forwarding manually.
Once again you massively overestimate the networking knowledge of "most people". Most people if offered a $1,000 reward couldn't show you how to disable upnp on their own router. When routers shipped with (paper weak security) WEP by default and WPA as an option the overwhelming majority of routers were never changed. Hell most people wouldn't know how to configure a SSID or security key ("the wireless internet password") if it wasn't for wizards. Most routers for home use now have windows install programs which find and configure the router because the concept of going to an IP address 192.168.0.1 results in too many tech support calls.