tailscale is the easiest option. learning curve isn't too bad, but definitely a hurdle for users.

I'm in the open, but have a proxy and a nested domain so it can't be automatically port scanned. It's a tradeoff I made for simpler setup for my family, and so far it's been fine. I could do tailscale, but there's no way my family would be in favor of it.

With the security vulnerabilities and the difficultly of setup, I use Emby.