can someone else use my machine as a router to forward traffic to anywhere else on the internet?

I’m not entirely sure what the security implications of that would even be if true but probably nothing good

I don’t have any other routes in my routing table other than my “default” route and this machine is reachable via a globally routable IPv4 address. Also I think there are probably other machines on the same subnet (cloud VPS)