tailscale, openvpn, etc. There are many ways...
it's literally impossible to do it without one side having inbound routeable connection, that's just how it is without universal IPv6 that's gonna continue to be a very common situation the mobile operators have had plenty of time to get that sorted out, so i call conspiracy and cartel on it