Recommendations on VPN Protocols through CGNAT?

Hi everyone!! I am brand new to EVERYTHING computer networking, so I was hoping for suggestions on vpn tunnel protocols. I have a home server with docker containers running some simple applications, with plans to expand. (most containers are dedicated to my media streaming). I want to be able to connect to my server outside of home and hopefully stream my media/set up friends to stream SAFELY. I wanted to go with raw wireguard (WG-Easy), but I am under CGNAT and can’t port forward at all. I have my own router, but that’s under LAN IPs from my building. Forgive me if my technical language needs some work. Anyway here is what I have considered so far: - Tailscale: pros: free, encrypted, easy UI cons: corporate entity, needs an account connecting my personal info, access to my metadata, basically I’m paranoid and want to be safe - VPN relay: idk much about these, I know they cost some money, but I’m mostly scared about them intercepting my traffic - Cloudeflare? I heard they limit speeds unless you cough up more money? I also am just scared of moving my media through them I don’t know guys, I want something that is known for security, decent speeds, and won’t kill my bank? Should I just use Tailscale and hope no one looks too deeply? I’d really appreciate your input :)