I know it’s not exactly what you asked, but.

I just use wireguard and then I’m on my network. No exposing anything. Can’t even tell it’s there.

Great if you’re the only person using it, or can set it up for the non technical.