in the interests of keeping the HTPC clean of FW and AV, has anyone considered placing theirs behind another home PC in a DMZ configuration?

The xbox360 would also need to be In that zone too wouldn't it? Strange that it doesn't need AV software...