Every -other- Alexa-enabled device on my network (including multiple Nests and WeMo devices) don't require remote access of that fashion - they make a specific, targeted outbound connection and use that to receive push notifications from the REST server in.
Orbi's method seems to come from the 2000's era of network computing, before people realized what a bad idea it is to have such a large attack service.
Sorry OP, wasn't trying to derail your conversation, but this has been bothering me as well. Apparently I can't use the Alexa skills at all in AP mode, for exactly that reason - as Orbi isn't the router, it can't open the firewall...which is a GOOD thing, because the whole design is terrible anyway.
I do dearly wish Netgear would hire some actual security-minded folks (ditto Samsung) and be willing to craft a new OS core, rather than adding wireless backhaul to what is otherwise a Nighthawk in disguise, running the same internal system design they have for about 8 years. A LOT has changed in that time, particularly concerning security best practices.
Rodney
