He *CAN* download torrents .. it's just that if he turns the superhub's security to "High" it blocks ALL incoming connections (which you'd expect), but then when you set port forwarding to let stuff through on a single specified port .. the damn thing totally ignores the port forward rule.
With security OFF (or low ?) there would be no real need (in a home environment) for port forwarding.
With Security HIGH, port forwarding is ignored
They've trimmed the firewall configuration so you cant apply your own rules (just 3 settings), so why have a port forwarding section in the router at all.