You should be able to disable UPnP in your router, but still use UPnP on your local network. If your router has the UPnP setting enabled, then malicious actors may be able to access your network.

You can only browse and play from the Browse Tree. Note: UPnP file sharing cannot be used to create a Kodi library on the client device, nor can you use any library features.

If using the Kodi UPnP Server, these browse tree nodes are based on the Kodi library nodes and you can create additional nodes in the Kodi server to expand the browse tree.

The browse tree can provide a series of nodes through which you can browse the content (year, title, actors, artists, albums etc).

The UPnP Server cotrols the appearance of what is displayed in the browse tree which varies between different UPnP servers.

It relies on the UPnP server to send a browse tree that will display on the client player.

The client player does not have direct access to the video and music files.

Kodi can be used as a UPnP Server that will stream its library contents to other players on the network, or it can be used as a UPnP Client that can receive music and video from a UPnP Server on the network.

Universal media server firewall