[cc: trimmed to nanog]
Which I'm not on... (not that that matters here, this
is about ended).
Let's just agree that without strong end-to-end encryption, its
all swiss cheese.
Yes, though with the caveat that without static addresses
the cheese is rather rank, and suitable for nothing at all,
with static addresses (relaly stable known addresses) so
filtering is possible at least a little first level protection