If you have the skills for setting it up, than that’s the best way to deploy tailscale, the true zero trust method, just keep it in house.

Tailscale is the way! Have been running it since January, flawlessly.