Is there a need to secure Cisco site to site vpn router?

Hi,

2 Cisco router configured for site to site vpn tunnel without split tunneling. Is there a need to run firewall on the router since there is only a single route between the routers? Is there other vulnerability that should be considered?

Thanks.