The article says:

> Modern routers ship with firewall policies that deny inbound traffic by default, even when a NAT is not being used.

So no, not every device needs its own firewall. You can have a single firewall at the entrance of your network.