[Nix-dev] Enabling CUPS unconditionally allows UDP/631 on the firewall

[Marc Weber]

A more complicated way would be introducing use cases such as
  - home (safe network)
  - public (unsafe network)

which changes defaults. But that would come with its own set of issues.

Thus I agree on disabling such features unless they are mandatory for a
service to function.

Everybody can introduce such safe/unsafe places on his/her own if
required.

Marc Weber