Yes I agree, but not from the public side. Network troubleshooting should be done from the internal LAN or via a VPN if remote support is required. Allowing ICMP requests\replies to your public IP address, from the public internet, is not standard security practice.
Yes I agree with everything...