The impact and urgency of the risk dictates the effort and cost to go in addressing any risks.
You say scanning won't find your port but do you have the port open on Pfsense to connect from your domain? If you haven't setup cloudflare argo tunnels they are a really simple and free way of not...