Yes, be concerned. Secure passwords really don't matter in this case.
UPnP is on many devices including Windows. However, focus on these two devices: your router and cable modem. These are the two you can most likely disable UPnP on and which should be the easiest and most effective security measure.
NO... for those using our gateways there is nothing to be concerned with. Could it be a problem for some third party devices maybe...there are ways to check for it. This is an example of a slow news week, somebody having a little information with no understanding of what they had, a need to make themselves look important and media who don't know the difference. So don't go off the deepend on this...for most it will be a non-issue and for god sakes don't freak out about anything GRC says. Over the years I've come to the conclusion that their sole purpose is to scare the hell out of people for nothing...can't tell you how many times I've had to undo what he's scared into folks.