Yeah that is what I have been reading. Which luckily OpenVPN has google authentication built into it(which is what I use on aws). Though now I need to figure out how to have unraid be undiscoverable by other computers on the same network, as so a local pc has to use the vpn encase it gets hacked.
Edit: Yeah looks like I will be going with a managed switch to make vlans, which UniFi Dream Machine seems to also have security built in so looking into that.