terii is correct. Just look at any Linux system and out of the box, it will have zero open ports. Windows on the other hand is full of useless (to most people) services that advertise themselves on the public Internet with open ports. File sharing is enabled by default...and so on.
Making the ports "look like they are closed" (i.e. "stealth") is cool but the underlying service should be closed if it's not being used for a hardened system.
First thing I do on a fresh install of Windows is go through disabling unnecessary services, closing ports etc. That despite me being behind a NAT router and hardware firewall, but there's no such thing as "OTT" in security.