isn't opening ports a secruity risk?