Here's the thread I was only partly remembering.

It looks like the determination was that opening ports are fine for the reasons Bill mentions above.