It's perfectly reasonable (if technically possible) for either the OS or a third-party "firewall" app to intercept dangerous requests and prompt the user to allow/deny them.

It has nothing to do with the firewire spec.