Digital Ocean announce Cloud Firewalls

Hi. And forgive my ignorance in advance. When I saw this announcement in my inbox I got quite excited. I have shied away from IaaS providers in preference to PaaS providers largely due to security (and the fact that they update / patch their own systems). I'm not certain if anyone agreed with me on that point or if Forge does all of this anyway (there's my ignorance again) but I thought I'd included a link here in case anyone else finds it useful - https://blog.digitalocean.com/cloud-firewalls-secure-droplets-by-default/?utm_medium=email&utm_source=local&utm_campaign=CloudFirewallsAnnounce