Shiny, from the users perspective. Security-wise, I thought that OS X came with its firewall (which is really just ipfw) enabled.

Googling just now corrected me, so I deleted my comment as it was inaccurate and a poor analogy. Sorry about that.