Quote:
This feature was added to mine in a recent firmware update

If your firewall can also be configured to only accept inbound connections for the forwarded ports from your work IP(s) then you should be pretty safe IMO.