My honest recommendation is dd It works, it does it’s job, and doesn’t need to many bells and whistles. My only complaint is that there isn’t an easy way to show progress. But as a background command, it works.

Check out Tailscale. They have 20 machine limit on the free plan. It runs on wireguard and is pretty secure.

My daily driver is Sway on Arch. I’ll help shout out the glory of this setup.

If the config file is well documented, you don’t need to worry too much about that bus. And it isn’t several user accounts, it’s a computer that needs to be accessible to nearly everybody. Like said in other comments, a script to destroy everything on logout, and then add a configuration to logout on idle.