Very cool! Add Ngrok to the mix and you have THE BUNKER IN THE PHONE.
It is a bunker in your browser. Why does it need reverse proxy? It communicates through a relay, it doesn't need to accept connections...
Sorry, I mixed my thoughts about a possible solution where a bunker is hosted in an app and you use something like ngrok or tailscale to proxy back to the app. Your proposal is actually better!