If the backdoor is used also open in it in the firewall. Yes this insecure, but only the test VM feature (disnixos-vm-env) uses it