That was an interesting read. Turns out they do use UPnP, but it's just one of many tools they turn to when other techniques fail.

Sidenote: this is a fantastic writeup.