Security of port forwarding using UPnP and OS X

As long as it's a strong password, and no vulnerabilities are found in the services responding on those ports, you should be fine to my knowledge (this applies to most things).