

For something end-user facing: I could understand this argument.
In this case they were more or less just calling a C function that had an unsigned long long as the parameter they were setting negative.
The whole ‘bug’ was that the other side of the function call was seeing a positive number no matter what.
The real situation was a bit more complicated, but that’s the gist.
Another option if you need public access without something like tailscale would be to use ddns and a AAAA record. Something like https://github.com/ddclient/ddclient would help do that.
That way if the IP changes, you’d pick up on the change for your vanity url within a few minutes… and can get https certs for that url as well.
Edit: I reread the OP. This doesn’t help if clients need direct ipv4. Sorry about that.