That isn't my presumption about nature of the concern. In OP's other comment they specify that the client is specifically worried about the open port.