Technically, with NAT you don't even have a route to the internal stuff. While with the pure firewall approach there is a route.

In practice, yeah, not much of a difference.