I now use both. DynIP for public-facing services (yeah I still have a few), and Tailscale for what only I need to access. Drastically reduced my attack surface.

Luckily I don't have to deal with CGNAT.

This makes me really happy, like really really. It is the exact part of the /guide where things work together and not agaist or replace, synergy and happiness.