Yes, it is really enough. If you have a Network Address Translation router (it’s hard to find one that is not), you are already isolated from the internet, so any other “firewall” is superfluous.
Also, a firewall is not internet security. It is a network management tool used to isolate parts of a network from the others. For instance, to isolate HR data away from unauthorized users and keep the data off other network servers.
Unless you poke a hole in that router through port forwarding, nothing on the internet knows your computer is connected.
When you send an http request through a web browser, it does give away some info, but Apple obscures it by passing an old version of Safari and macOS Catalina as the OS.
See this to keep yourself safe on the internet: Effective defenses against malware and ot… - Apple Community