VPN is also common in those discussions, it's more setup on the client side but can win on security. Of course there'd be a lot of people in trouble if you couldn't trust tailscale to be better than a beginner selfhoster on security so it's still a good goto option.