By default, Remote Assistance is allowed in the exceptions. And on many forums and sites where this firewall is discussed and recommendations are given for configuration, I see it checked in the graphics. Is there any good reason why you'd want to allow this by default?