¶ Why disable?
In general, these security features are good, and certainly well-intended. However, in the case where you have a specific need to accept "unsolicted" traffic, such as remote access to filter your mobile devices, or for maintenance access by Compass, these security features can get in the way, and need to be disabled.
Is this degrading your security profile? Well, it's a tradeoff. Any time you grant additional access, you're theoretically increasing the potential attack surface. In general, however, if your firewall is configured correctly, there is no need to worry.
¶ Business accounts: Comcast SecurityEdge
Sign-in to your account: https://business.comcast.com/account/
Locate SecurityEdge and disable it.
Note that some users on internet forums indicate that you need to contact customer service to have it truly disabled.
¶ Residential accounts: Xfinity Advanced Security
Visit https://internet.xfinity.com/more/my-services/my-services-disabling and toggle xFi Advanced Security to OFF.
Note that you will be prompted to sign-in to your Xfinity account to do this if you aren't already signed-in.