I haven't left open ports since a 786k SDSL Linux router PC running CS and Quake servers in 2002. WireGuard these days.