If someone disables the firewall on a production machine, he/she is fired. If my mom disables her firewall on her PC, I would lecture her. If a distribution openly says there is no firewall needed without backing it up, then something is wrong. Choice is good, but these are clearly bad choices. If Silverblue can provide a firewalld setup at first boot in a distribution where containers are meant to be run, then OpenSUSE can/should too.
I know what you mean by the way with choice, but this is really not okay. Also the toolbox/distrobox container decision to not include the documentation without an easy way to get them back is hard to understand. If experienced users are confused by this because these choices result in a insecure and harder to use system, then who is the target audience exactly? You’re also not targeting newbies. I hope things will improve, because I was looking forward using a European based distribution with solid open-source values. But I guess I’ll be stuck with Red Hat/Fedora for a while (and that’s fine).