It seems to me that Avahi would be safe to run by default. That would
allow accessing remote machines through their .local names, even if it
wouldn't solve the problem of sharing *from* the machine itself.
But it would mean we can SSH, or VNC into local area machines, and
consume data (shares, music, etc.).