not greatttt at web service hosting but I feel like it depends on what you’re hosting? if it’s like a containerized web app that won’t see a ton of traffic / has decent security opening a port is fine and has worked for me with stuff like revolt.