Yeah except the web browser and mail client I wish the default would be no open sockets for you ever.

Unless it is a distribution policy to respect privacy by default it is just to much work to keep up with all the leaks the system might have.