Thing is she can then just change the port range. If she has the upnp button and random ports clicked it may just cycle to something else automaticlly carry out a upnp request for the port and the router will blindly open it. All without her having to touch the router config.