A layered approach to security (onion model) is the only sane approach because any given layer will always have flaws.
The notion I get from the article is that security becomes a huge problem when every node is exposed to almost every other node by design intent. That's why NAT is mentioned several times.