What are the security risks posed by running a full node bitcoin core client? On a typical system, port 8333 is open and all other nodes can actually 'see' my machine and sites like https://bitnodes.earn.com/ can verify the connection.
How can the risks be mitigated? (I'm on Windows)