Yes, there are many approaches, each of which have different advantages and disadvantages - all have been well documented in previous threads. Those threads point out to some key articles on blogs and the Node-RED documentation as well.
Some of us avoid the problem by interfacing through the Telegram messaging service - Node-RED has some excellent nodes for quickly building bots for Telegram.
I have a bot command that will also turn on an NGROK session that temporarily creates a secure tunnel that I can use if I need to access Node-RED in an emergency.
I prefer that to having a permanently running VPN session as it limits any exposure. Indeed, in some countries running a VPN to your home might attract unwelcome attention or even be illegal.
