If I have a firewall, and I'm the only person who uses my computer, do I really have to have a password on my non-root account? I know the answer is "yes" but -- why? They can't do anything to my machine anyway, except use it. And due to the firewall that never happens anyway.