It’s convenient for some services like jellyfin that have a companion app. It’s much easier to just point the app to a domain name you control to get everything working without vpn. The certificate support is nice too.

Say for instance you have a family member that you know won’t be taking the time to setup vpn configs to access this device. It’s easy to just say here is the link the app is asking for and here is your username/password.

ZFS snapshots combined with replication to another box. That and a cronjob on packaging up my compose/config files.