The other thing they do is provide the man in the middle for both parties to call in to. This eliminates the need to poke holes in firewalls (for corporate support) or mess with port forwarding (for grandma's DSL modem/router) since both sides initiate their respective connections.