Would this still apply if you had set the permissions on the shared folders to read only or if you had to log in just to view them?
Yes. To log in from outside the network, communication is still required over those ports, whether or not access is granted. The fact that a password is even requested indicates that communication is occuring with those protocols, and must therefore be allowed through the router.

Don't know about the AOL bit though.