A firewall can reduce who gets an opportunity to exploit this, but does not make an authenticated RCE irrelevant. This access pattern is perfectly legitimate for hosted Redis services, for example.