You don't need UDP Hole punching for clients behind a CGNNAT if the topology is where they connect to your public IP.