…and WireGuard it together. I also did this before I got static IPs…

Well, I used it as a VPN to go home, but the principle is the same.

I’m more scared of online services being discontinued and/or being getting vendor locked and forced to pay ransom on a regular basis. Therefore, I host and back up everything on my own.

There has been a report that certain devices (IoT, modems, BMCs, routers, switches, remote management) that use proprietary implementation of SSH instead of OpenSSH are vulnerable to private key exposure/compromise.

Maybe I would go a small step further and go for rootless Podman.