uPNP routers and uPNP media servers, security query

hi all,

I understand that the uPNP setting on a router lets clients open and
close ports on demand. However, on my network I run TwonkyMedia which
serves up videos/music etc and is marketed as a "uPNP media server"...

I understand this means it conforms to a standard that allows devices
to more transparently find it and be configured but does this also mean
that the media server will try and open ports on my router too?

In effect, I am asking - regardless of what the uPNP client tries to do
- as long as I have uPNP disabled on my router I am not introducing any
security holes right?

cheers!