>First of all, you'd have to go out of your way to disable the firewall on a modern Windows install. There is a screen that pops up everytime you plug in a net

>First of all, you'd have to go out of your way to disable the firewall on a modern Windows install. There is a screen that pops up everytime you plug in a network cable or connect to a wifi network for the first time. It asks what kind of network you are on, personal, work, public. Depending on what you answer here it does stuff to the firewall. Then there are the multitude of AV products that disable the firewall with their own suboptimal garbage. These wouldn't have been made if they weren't once necessary. Windows should have had a firewall when it got its own networking stack, but it went a couple of decades without one, so people got used to needing to add one. Even if that article is correct it is Android off of windows by an order of magnitude. > Ultimately, if you were to allow Android devices to by default, open and run arbitrary native code that users download from the internet But they aren't setup that way. That is part of why they are more secure.