Access control, Cloudflare Tunnels, monitoring, and what happens when someone pokes at things that are not theirs.
Backend DNS and basic user authentication, without opening the private network.