I don't know if it was mentioned already but how could I check if my ports are under "attack"? OPs graphic looks really nice

That worked, thanks a ton! :-)

This would be complicated as you can use the Netflix service on a new device for at least 30 days without issues

Yes. I installed a browser on the androidTV and it showed my local ip from back home (where the wireguard host runs) but no ipv6.

I have to look into the exit node thing as it doesn't say anything to me but thanks for the Idea!

Tailscale should have the same problem as it basically runs on wireguard as far as I know. Are there any other things tailscale itself changes? I will try it tho because why not. I could probably also try headscale as I rather stay on the open source side ?