I have no clearnet exposure for my node, all solutions I have explored so far are custodial bottlenecks. Why are you gping through a vps instead of tailscale & cloudflare tunnel the connection? Custodial potatoe, potato
I don’t trust Cloudflare generally so I don’t allow them in my network. I don’t worry about censorship because I have a workaround if my provider does that. I am worried about having funds rugged. So my “custodial” risk as you call it, I feel anyway, is pretty mitigated.