I’m trying to move away from needing a VPN to connect to make it simpler for less technically inclined family members

For now just Tailscale but I’m working on setting up a reverse proxy and SSO through Authentik

Same thing, no?

I personally finished deleting windows off of all of my machines recently. One by one we will add up over time

Restarting should also disable biometrics until you put a pin in once