nmap/shields up are only checking if there are ports open from the internet. As a test of security, it's not the whole picture by any means and a lot of it you can't do with an automated test.
Shields Up is also guilty of scaremongering to sell crud - for example, it'll moan if your router responds to ICMP echo requests when blocking ICMP will break your internet connection...