It has been a long while, the last time I setup a BSD system it defaulted to off instead of on. The security was great, but remembering what and where to turn on ports, permissions, etc. It was a week long setup.