Your points are well taken, but this is unfortunately a sacrifice that needs to be made in the name of security. While partial centralization would solve a few problems, it would also introduce weak points in its security model that three letter agencies would be quick to exploit.

Tox actually does NAT traversal quite well I've found, and it does support SOCKS5 connections out of the box, albeit through TCP relay nodes rather than direct P2P.