No, SP2 was the big security patch for XP. Most notably, the firewall was on by default. This blocked a whole class of remote-control attacks, because you weren't exposing every single service just by connecting a network cable.

SP3 came four years later, in 2008.