Not a networking guy, but from what I read the included port forwarding features (any port forwarding really) can open up vulnerabilities if you’re not knowledgeable with network security. The safer way to do things is through a vpn. I set up a WireGuard vpn on a raspberry pi and it has been good enough for me. This might not allow you to use it on a Roku though.