There are some traps I’ll consider a calculated risk.

I currently (until I eventually get around to setting up a jump sever) use this exact setup. This is because CF tunnel is free, easy, and bypasses any ISP-level tomfoolery that blocks port forwarding, which the last being the most crucial to me.

I will eventually get around to setting up my own equivalent tunnel, however that’s not free and not as easy as CF tunnel.