I’d agree, apart from I wouldn’t recommend disabling UPnP on your router if you have applied good hygiene and practice on the clients on your home network.
If you do disable, then you should be prepared to manually configure, both enabling and disabling, specific port forwarding config on your router.
It would be better to undertake a weekly check of the UPnP updates your router will have applied, and ensure it correlates with services you are aware of. It won’t be silent if using a quality router from a quality ISP or similar as it will provide this monitoring.
It’s what I do… and there are not that many UPnP port forwarding requests per week on my home network. This method also provides a degree of protective monitoring which would indicate if you haven attacked and exploited which you might not otherwise be aware.
The real important aspects are virus protection, malware protection (don’t forget servers like NASs) and good anti phishing practice from the users (family) on your network.