It's only bad if the services running on those ports are not secured.