Yes. If Flask has any insecurities, you've just exposed it to the internet and any rights Flask has (likely your local user account), plus any local privilege

Yes. If Flask has any insecurities, you've just exposed it to the internet and any rights Flask has (likely your local user account), plus any local privilege escalation.