You’re opening a port in your VPN connection so no there’s no “huge vulnerability” (even without a VPN you’re only opening a port to your torrent client) and as mentioned, you’re only seeding to people who have port forwarding set up. If more people run without it like yourself, the whole system breaks down.