Given the above general points I don’t think it has to, however if not implemented properly it certainly can undermine even the best security policies you have for your DMZ (though this is really true ...