A ton of open ports, some of them completely undocumented, and many Macs are shipped with all firewalls turned off by default. Also, I was quite surprised how easy to turn on an unencrypted VNC server without a single warning.