One option that i am not sering here that is also very safe is install wireguard and allow them to use it via vpn.