> Google acts as a meet-me point and also provides the authentication mechanisms including MFA.

On one hand, it made me chuckle a bit. On the other hand, it could be reasonable in many scenarios.

I run my server on a connection that's a cgnat and nat by home router. So, no option for me other than chrome remote desktop. It also does p2p.

If you create an outbound tunnel, your options are whatever you want. nat and cgnat only affect inbound routing.

check into tailscale or cloudflare tunnels/argo