I'd much rather deal with setting up a few VPN gateways which is trivial at most...than securing a public web service. I deal with that crap enough at work.

There are a lot less variables to contend with with a single VPN endpoint which undergoes considerably more security auditing than N public web services. Many of which I don't have the time to review myself and mitigate if they decide to suck at coding.

Edit: I share my services with less than 5 households though.

Edit2: I'm not sure what public ipv4 or ipv6 has to do with this. My remote sites use starlink ipv4. I haven't setup ipv6 on those internally at all. They all tunnel via wireguard to my homesite.