I think it implies that the services which run on the open ports are full of security holes, so the firewall is pretty much useless.