From where do I know when should I use a monitor over firewall architecture?

Is it always necessary to set up an MI Listener and a Monitor-over-firewall machine/setup in case of remote servers (do remote servers always have firewall?)?

Even for example in case when I want to use a simple windows resource graph on a remote server or is it enough to use only a controller machine in this case, and connect to the server directly from there?