Anyone can also use any exploits then find so you have to make sure you’re keeping up updating your devices. And every port you forward is an intrusion point into your network should someone want to hack you.
This is the part that scares the shit out of me. I bought a domain with the intention of making a little web 1.0 website for fun and to learn, but I have no real idea what I’m doing and the security risk makes it a non-starter :(