Firewalling them is probably a better idea. For most applications, connecting to a central server/hub that's better secured is just fine.