firewall paradox