Anyone considering just moving to wireguard access instead of reverse proxy?

I have about 6-7 personal docker containers routed via a custom domain and NGINX Proxy Manager. I do use Fail2ban, some unifi rules and region blocking. But I'm considering just going VPN only access with everything apart from Plex (due to my friends and family) to reduce my attack vector. I've become a bit paranoid with all the AI talk, vulnerabilities being found faster and attacked faster... just wondered others opinions who have a stronger security background, im just a due who can follow guides.