Yeah I figured it could be a bug but I wasn't sure. And don't worry, it took me a good while to notice it too!
Not having matchmaking is alright, as long as people have a safer way to host and join rooms.
If you can think of any ideas, that'd be great! FYI, portforwarding is not an inherent security risk, but I understand not wanting to give your IP to everyone you play with.
