I like to run ufw on all my machines but I’m also a tinfoil-hat wearing wacko who believes that no computer should ever really be trusted. Just trusted enough to do specific tasks.

If someone somehow busts into one of my VLANs, at least the other machines on that net will still have some sort of protection.

Publishers and companies will always want DRM

Developers should refuse to write malware.