CGNAT is basically an apartment complex with a gated community and Public IP is basically your own Independent villa . You open the gates whenever you want , close whenever you want in your own building . You are responsible for any robbery(Port forwarding and Firewall) and basically anything that happens in your villa . You step out of your house(home router) and enter the road(Internet) directly when you are on the independent house