Even if we got around misconfiguration (user ignorance) I imagine zero-day (feds) would make the firewall argument a tough one for end user protection