One part of Wireguard that is niggling in the back of my mind is that it seems like if someone gets a hold of the user's key and the IP of the server they can pretty easily jump on- there doesn't seem ...

Its been years since I set up access to home network from remote, back then it was just dynamic dns and port forwarding. Sounds like just port forwarding is a big no no now, even back then I stopped ...