> for all this I am not using any public APIs or making any of my systems or data accessible from the public internet

I get that it doesn’t look like data is going over the public internet, but it still is? Is this different than linking systems with tailscale/wireguard/private vpn? Seems like an ingenuous statement to make.