NAT Types and security

Question: What should I do to get NAT type 1 on my PlayStation while keeping NAT type 2 on my other devices?

Hello! I have connected an AirPort Express into my modem. The AirPort Express gives me NAT type 2 on my units, which is good. However, my PlayStation 4 has a lot of trouble connecting to online games with this NAT type. I would like to get NAT type 1 on my PlayStation, while keeping NAT type 2 on the rest of my devices for security purposes.

The the two options I can imagine are the following:

1. Change the PlayStations NAT type without compromising the security for the other devices is to directly connect the PlayStation to the modem with an ethernet cable. Again, I would not want a cable through half of my house, and therefore I want to know if there are any other options.
2. Buy a new separate router and have two completely sealed networks, then use port forwarding to get NAT type 1 on one of the routers.

Changing NAT type to open (1) for all devices is not an option as it will change the security settings.