Suppose I configure an outbound filter exception for FTP-

Source Interface - Any - since I want it to work from the BM server or

behind BM
Destination Interface - Public

Packet type ftp-port-pasv-st

Source address - Any
Destination address - Any

So is this configuration secure? I know that inbound stateful filters
not be used as it is a security risk but is this example insecure with
source interface set to Any?