I’m not expert but for the sake of getting some discussion going:
Don’t open ports on your router to expose services to the open internet.
Use a vpn when torrenting and make sure your torrent client is set to only use the vpn’s network adapter. This way, if your vpn drops out the torrent client can’t reach the internet.
I keep everything local and use Tailscale to access things while I’m away from home.
My pc only has 1 nvme slot so I used an $18 sabrent pcie to nvme adapter to add another nvme and keep my Linux and windows separated. Just wanted to put this out there in case you want an easier way to switch between OSs.