The answer is no. Quoted from online:
T-Mobile’s firewall is managed network side for both IPv4 and IPv6, this means that T-Mobile Home Internet users cannot configure the firewall themselves.
On IPv4 T-Mobile has to use CG-NAT, which makes it really complicated for the firewall to be managed anywhere other than at the network side.
On IPv6 they don’t have to do that, however it is easier for T-Mobile to have both firewalls managed network side as opposed to the IPv4 firewall network side and the IPv6 firewall client side.
It is also worth noting that they had their network setup this way long before they offered home
