Putting everything behind a VPN seems like the solution selfhosters have landed on. That way you have some control over how quickly you have to respond.