For others who come across this, Tailscale with the Funnel option enabled is another approach.
Funnel enables non-Tailscale clients access to specified clients resources. So people don't need the Tailscale client installed to access say, a web server in your Tailscale network.