The OS does not have any firewall. Add a basic firewall script on the desktop so people can copy and paste a basic firewall so they can do secure updates.
The OS is not secure because you all do updates with no firewalls. To do a secure update blacklist everything and only whitelist the update servers so the people an have a secure update.
