STUN isn't something that runs on your router. You can disable UPnP in your router and still use Tailscale perfectly fine.
Enterprise routers sometimes allow only 80/tcp and 443/tcp egress traffic.
That’s why sometimes Tailscale falls back to relaying, which is pretty slow (unless in the future they deploy large number of relay servers around the world).