Being directly connectied to the net is by far more dangerous than behind a network. you public IP is there for all to see, on a modem this IP IS your PC, on a network behind NAT it's the router and there has to be a routing entry for external ports to map to internal addresses.