Yes, but most NAT routers consumers use act as a firewall too (i.e. they block ingress traffic that is not related to a connection that was initiated from inside)