My personal experience level I am administrating many servers for our university since 2016. Of course we try to keep them as safe as possible by using firewalls. They are used to protect our network from unwanted visitors and to protect every single node from each other. Only administrative and known service ports are open for specific IPs. Additionally we are NATting a lot of traffic. So you could say I am firm with the usage of firewalls.