Although the firewall protects the router from the public interface, you should still would like to disable RouterOS solutions.A router may need DNS cache enabled, which decreases resolving time for DNS requests from customers to remote servers. In case DNS cache is not really expected in your router or A different router is used for these purposes