AFAIK, there aren't any gotchas.
I am with Telewest Blueyonder (same company as NTL now), and I didn't even have to spoof the MAC address of my PC when I plugged my wifi router into the cable modem.
I assume that if you are going to get a WAP/switch/router it will also have a built-in firewall.
SD