Changing the port is not the kind of security measure that will consume a lot of the attacker resources
Are you familiar with the Swiss cheese model of risk management[0]? Obscurity is just another slice of Swiss cheese. It's not your only security measure. You still use all the other measures.