There are OpenVPN clients for android that I use to access private LAN resources.
But I have in fact also left my nextcloud on the web. I'm not that worried.
Just have to stay informed on any big vulns, and I also stay as many releases as I can behind the bleeding edge. That helped me avoid the recent fidokey issue.