The most secure setup is simply wireguard or https://lnlink.app + CLN. No third parties needed.