I'm in the open, but have a proxy and a nested domain so it can't be automatically port scanned. It's a tradeoff I made for simpler setup for my family, and so far it's been fine. I could do tailscale, but there's no way my family would be in favor of it.