A: port forwarding is only required if not in a DMZ.
B: open ports are how machines are accessed regardless of if they are forwarded or not.
C: if you don’t understand how ports work, you have no business exposing anything.