That’s a fair point. However, on the practical side, it’s sad that I would have to root my gf’s phone to let her access the services we host.

I ended up using a DynDNS and Caddy for managing my cert.