I use a NAT Router (Airport Extreme) to connect to the internet and I sleep pretty well at night knowing my computer and the data it contains is perfectly safe.
A NAT router will do absolutely nothing to protect you from HTML/javascript browser exploits, email HTML processing bugs/exploits, image processing bugs/exploits etc. I.e., in the modern threat landscape it is basically useless.
If you think a NAT router is any real sort of protection, you may wish to reconsider your stance and look into how modern exploits are delivered. Nearly everyone on the internet is behind a NAT router of some kind these days, and yet malware is still rampant.
The browser/email are the most common vector for exploiting machines. If you do insist on running end of support platforms, your best bet is to migrate to a supported browser/mail reader that isn't heavily dependent on the OS libraries for processing HTML, images, etc.
Thinking you're secure purely because you're behind a NAT router is very much a false sense of security. All you need to do is visit ONE hacked website that targets your browser and you're done. The malware (acquired via browser/email client/torrent/etc.) will establish an outbound CnC connection to the remote server (that your NAT router will happily let through) and then the router's NAT is essentially bypassed.
Websites/companies get hacked all the time. Even reputable ones. e.g., Garmin just last month. If the attacker had decided to host malware on their site instead of merely going for ransom by encrypting their servers, any of their customers who hit the site would potentially be at risk.