I think that, as in most things, the "appropriate" solution depends on your situation. For example, at work a host-based firewall would severely hamper various tools needed for day-to-day...