Just a note to the devs or whoever is managing https://support.plex.tv/articles/200931138-troubleshooting-remote-access/
When specifying a public port and configuring port forwarding, one still needs to configure the firewall on the device (In my case, Windows 10 VM running on Server 2016) to only allow access through the port (i.e. TCP 32400) to Plex and Plex Services.
It might be cumbersome to set it up in Windows Defender Firewall with Advanced Security.
Could the devs somehow code it into Plex Server to update the firewall when the Manually Specify Public Port is checked?
Got my server breached last night through port 32400 and they made off with some information.