Appreciate this super valid consideration.
If services are being exposed for friends and family, using cloudflare tunnels might be a trade off between security or convenience.
If the goal is to ensure security of a home lab online, the less of it that’s discoverable by automated bots, etc, the better.