Cloudflare tunnels are free and give you multiple layers of protection (requiring certain auth methods, geoblocking, not needing to expose your IP, etc)
They are great but the free tier has restrictions like a 100mb file limit and not using it for anything like videos or music. Otherwise it would be perfect for things like Immich. As they stand they are really good for other self hosted services like a recipe manager, a bookmark manager, etc.
If you are proxying outbound it will always be like this.
The alternative is exposing your IP to the internet and having to deal with your own proxying, AI bot scraping insanity, constant port scans and ssh probes, showing up as a target on shodan.io, etc.
If you want to make your home connection the service target for the dregs of the internet be my guess, but couldn't be me.