Yes, but the probability of the average user getting pwned was so small that it wasn't worth the constant firewall babysitting.