Exposing Home Assistant without opening a port: Cloudflare Tunnel plus Access
Port forwarding puts your smart home on the public internet. A Cloudflare Tunnel plus an Access policy gives you remote control with no inbound ports, no dynamic DNS, and a login in front of everything.