Hehe, a bit untrue.
With patching, you can still secure it. Microsoft only make it more
secure by offering you free firewall for those who don't bother to
get a firewall. It is turned on by default.
SP2 is meant to patch up all the known security issues and provide
some security as well. It saves you time of downloading the updates
one by one. With it, you patched up the whole system at one go.
Without it, it's still the same by going to their update
website.