This is really more of a technical issue. When BGP is enabled, the default route is sometimes substituted by a route learnt via BGP. This can lead to firewall traffic not reaching the correct WAN for updates or being routed incorrectly through neighbor BGP.
"