YMMV....
FWIW, I've installed 2 NVR's for clients, both Amcrest (rebranded Dahua), both port forwared, one hacked after 1 month, one still OK 5 years later.
I've been running my BI server since 2014 using port forwarding, never hacked.
Also running 2 more residential BI servers and a business...