I wonder if this “hole punching” also works for VPN connections, making the node semi clear-net somewhat private. (Proton has some special NAT options)
I like this approach without a central coordinator via TOR / I2C. Don’t think it’s the easiest option to get working.