Debug upload port may be undesirable for some

Could you not add a rule that allows that port for that domain only?