The way I think of it is a firewall shouldn't be needed, but the cost of adding and running one is pretty small. Besides, saying "just don't make mistakes and you won't need one" is useless- everyone makes mistakes, and that's why we use firewalls.