Changing ports isn’t a terrible thing, also not the perfect “fix” either, as you can still recognize open ports and scan the service on them.

Some ports are reserved in networking, so should stay away from those.

Some ISPs don’t allow you open ports on 80/443 as those are web hosting ports and they provide a service to consumers to download content from the internet, not for their consumer to be a web hosting provider as well. That’s at the residential level, if you have a business plan that might change, but it might be hard to convince and ISP otherwise.

I run a PiHole and have Quad9 as the upstream resolver instead of the ISP. That was pretty simple to setup as well. You can also do DNS-over-HTTPs and other options as well for content filtering to block malware and items of DNS upstream.