Agreed, I believe the default Firewall security level is "Medium" and I think that's far too strict. First thing I do when adding a new zone is to set it to "Essentially off"
When it's needed, it's needed, but it amazes me how many people feel they need big brother protection for their personal blog and nextcloud