also you run the risk of d/l something that may open one or more ports to establish an outgoing connection - without a firewall alerting you to this then you wouldn't know unless you are monitoring your traffic.

Much like everyone else I have my ports closed and then have a firewall as an extra safeguard

v_Ln