Should we protect embedded Linux devices?

Can Linux-based embedded systems be considered secure by default or do they require additional protection?