No VPN or exposing ports necessary.
Half of Home Assistant users can't be wrong.