You're right, but I'm not really after "security". It's not like I'm hosting state secrets.

I may move to tailscale though, which would be the same thing without exposing anything publicly. Besides I already use tailscale for other things.