It would be great if we can flag bad ports and alert on them. 3389 should never be open, and many other are very problematic. Insurance companies like Coalition are doing this and Huntress can too. https://control.coalitioninc.com/login/