I use tailscale and it is great, i dont mind activating a vpn whenever i want to acces my services, but that is an extra weird step for my sister to access my jellyfin library.
Do you use a reverse proxy? If so how many ports do you have exposed (say for 10 hosted services)?