firewalls are a choice that the enduser makes.

non-routed prefixes are a limitation imposed by the ISP the the user can't address.