Firewalling is a good practice and hopefully provide some traceability if servers at a registrar would start to attack the epp servers. It should however not the be only defense as that would make the system vulnerable to the least secure registrar that is approved by the registry. Becoming a registrar is also in many cases not that hard.