Or they are just unhelpful. Of course port forward has risks but this is why we try ports rather than putting the server on the internet wholesale. Since the ports are and this gets technical, only connect to a specific program in the server the program in the server shall be resistant to attacks. If not what good is this server?