Yes but the OS X firewall is off by default as well. Enabling it at the router protects all machines behind the LAN as well (but clearly not the wireless clients open to direct attack)