That's a bit oversimplified. It just means you cannot be discovered. However, if somebody already knows you're at that IP, and they find (or already know about) a security flaw in your firewall, they may still be able to mess you up real good. There's generally very little interest in DDOSing a private person though, so I wouldn't worry regardless.
