You do not have to open any port to reach your synology router form the Wan side. Just enable quickconnect.
You don’t have to enable the two firewall rules you see in the picture.
As a benefit you don’t get an certificate error when you reach the firewall through Quickconnect.