Further testing suggests that once opened, port 83 remains open even after un-checking “Enable WAN Access” and clicking “apply”.
I checked in Luci and “glservice” (which presumably is what the WAN access toggles) is not enabled.