Right? Not to mention they leave WinRM and Remote Registry running and exposed to the web by default as well... Utter nonsense. And people wonder why I do things the way I do?...
This service, another service, unused service, all exposed, opened, security hole, ...
Keep you PC (notebook) unchanged because you don't know when you will need original management services config. Wasted time to modify it again and again. Simply enable "Block all incoming connections, ..." in firewall. Your comp will be client, not server and protected from unwanted external incoming connections. Simple, quick and easily revertible network services protection.