That's not true, if you don't care about security you can open the port. I use a reverse proxy (caddy, super simple) which is somewhere in the middle security wise. Tailscale is more secure but a hassle on each client.