Why would you run them without authentication? One mistake in your iptables shouldn't instantly compromise your operation... Best practice is 'defense in dept

Why would you run them without authentication? One mistake in your iptables shouldn't instantly compromise your operation... Best practice is 'defense in depth', not 'we'll just lock down the perimeter'.