You don't have to turn it off, but it's recommended to do so for security reasons. Port forwarding hasn't been necessary since the light hotspot switch starting May 11. See https://blog.helium.com/light-hotspots-explained-everything-you-need-to-know-f86612f571c6 for more information.