Security Question

I was reading some stuff by Microsoft on split dns. They insist that a
dns server on a private network should never use a root hints file but
should always forward to the dns server at you ISP.

What do you all think about this? Is it safe to use root hints from a
private network behind a firewall or should you always forward?

Thanks,

Tom Naves