Dang, just carefully retested, and you are right! In some of my testing, I was correctly coming in on the VPN from my laptop while connected to my mobile hotspot. When I was able to successfully connect to the CGNAT IP, it was when I had inadvertently forgotten to unplug my ethernet cable from...
Router: RT-AX86U Pro | Firmware: 3004.388.4
I'm using a mobile broadband router (Netgear) with Verizon as my service provider. They are doing some type of NAT because Asus Network Map shows one non-private IP address (e.g. 123.123.123.123) while external check such as ipmonkey.com shows...