The T2 security chips on the later Intel MacBooks make this a lot harder on more recent ones, and that’s completely ignoring everything going on with the ARM ones (Asahi Linux seems pretty cool! I don’t have a Mac so I don’t know how usable it is though)
25565 also gets a decent amount of malicious traffic because of Minecraft though. I’d recommend switching the port to something different at the very least. When I hosted a server for the first time on 25565 my router pretty immediately gave me warnings about attempted network traffic coming from Europe/Asia when I (and everyone I gave the IP to) live in the US.