I wrote a brief post for work about the value of host firewalls in cloud.

https://www.redhat.com/en/blog/do-host-firewalls-matter-cloud-deployments