This may be completely untrue but maybe the remote users could get a vpn with a server near yours? Without having the slightest idea that it does I could imagine it could help.

I like it. However, as someone who likes to try out stuff from Ali biggest hurdle will be to identify the devices in the first place.

Look into let’s encrypt and acme. Requires a publicly registered domain though.