You’ve made a sweeping generalization in implying that since 4chan “as a platform” has caused harm, then all of its users are guilty/complicit and must relinquish their right to privacy. That and you’re still misunderstanding the meaning of “fundamental” in this case, since that adjective would suggest that the right in question is not counted among those that would be taken away from you in case of moral/legal transgressions.

So privacy is a “fundamental” right, except if /u/[email protected] thinks you’re a distasteful individual.

Currently I expose port 22 for SSH, 443 for Nginx and a couple extra for Syncthing (to mirror my media files between a Hetzner Storage Box and my NAS at home).
There’s a specific setup I tried to build once but didn’t manage:

• Expose only Wireguard port from my VPS
• make it so that when (and only when) a device is connected to the VPS via Wireguard, then mydomain.xyz will target the VPS’ IP (and therefore hit my Nginx proxy which redirects to my various services at myservices.mydomain.xyz.

I tried by having a Adguard Home running on that same VPS, and setting its IP as the DNS in the wg0.conf that goes on the client device but it didn’t work.