It does, especially then when it's interfering with legitimate network connections. But at least it does its job without introducing new trouble, including spamming the user with useless messages. Still it's better to disabled unnecessary services.
And they hardly achieve any security. Because this requires some serious configuration, which is hardly related to either the default rules or the useless outputs of the silly questions.
That's what "host-based packet filter" means.