Does it mean everyone needs to have the port open, firewalls off etc etc?

No, only one player needs public IP, all the others should be able to https://en.wikipedia.org/wiki/UDP_hole_punching punch through the nat. Theoretically.

You still need a STUN server.

The closest you can get is a ...