Yes, wondering that as well...
You can only switch a point around once. Or, you know, just build in the Firewall +1 program and get 8 Firewall that way - but that also takes up your one modification slot. 8 Firewall still gives you a decent defend pool though, but it's not unassailable. Diagnostics is neat, but (without any decent description of what it actually does) I doubt it actually warns you of an attack in progress until there's actual damage done - at which point it's likely too late. (Or a Sleaze roll is failed, or attack roll is made, but then you'd know anyway).
By the way, now that I'm looking at it...
The game says that Matrix Defense uses the owner's mental stat (Int or Wil, depending on the action), unless it's unattended, in which case you use Device Rating (of the device in question, so 3 for most, up to 7 for a commlink). That would mean that, if my Commlink is attacked, it'd never use the Device Rating (my commlink doesn't count as unattended per the description - even if you're not actively using it, it still depends on how you used it earlier, so uses your own stats). But slaved devices explicitly mention under PAN that you use the highest of your mental stat and the Device Rating. That wouldn't apply to commlinks, though, since they're (usually) not slaved - they're the masters. Am I missing a separate rule somewhere that states you can substitute your Device Rating, even for non-slaved devices?
Anyway, regardless of the above, your Smartgun's defense pool will be around 11-13 (with Firewall 8 on your commlink), since Intuition and Willpower rarely go over 5, and the device rating of the smartgun is 3.