For publicly accessible services, look into Cloudflare Tunnels. For private or restricted access services, add a Cloudflare Application to the Tunnel. The Tunnel provides a VPN connection without exposing ports on your router, and the Application provides authentication for access.
True, but then Tailscale needs to be installed on the remote device to connect. A Cloudflare Tunnel and Application can be accessed by pretty much any device. This was more appropriate for my use case. YMMV, of course.
For restricted access, I add a Cloudflare Application in front of the Tunnel to provide authentication. Work's like a charm, and the user never hits my services unless they successfully authenticate.
Thank you for the heads up on revanced. I've been using NewPipe, and while it works very well, I like that revanced provides a more genuine YT experience.