Hmm, based on research up to now I woulda preferred Wireguard to work with Tailscale (I don't know a lot about this yet, never actually done it), but it's good to know that'll be an option. As for DDNS, eh, I suppose I could always set up a separate non-router DDNS updater to use with no-ip, or...