I use their tunnels in conjunction with internal split horizon DNS so I don’t have to forward any ports and can access things locally faster so I’m probably breaking this rule but I haven’t gotten any emails or letters about it yet. Crossing my fingers they don’t care lol