One way to get access, rather than a cloud solution, is to use a mesh network solution like WireGuard/Tailscale (and I’m gonna mention Hamachi on Windows, because I’ve used it since about 2005).

These solutions create an encrypted virtual network between devices that’s runs on top of whatever network you’re currently on.

In this way you’re never exposing you’re internal resources, in any way, to the internet*. Only other devices that are running the client app, using your encryption keys.

I’m currently running Tailscale on a desktop at home, all our mobile devices, and a Raspberry pi. I can connect to SMB shares on my home desktop from my phone, wherever I am.

I’ve kept my laptop in sync with my desktop at home this way (using Hamachi) since ~2005.

This approach means you’re always using LAN connection methods, rather than relying on a cloud you don’t control.

*With Wireguard/Tailscale you can expose specific resources to the wider world, but you have to specifically configure it.