I actually settled my email thing. I really just wanted an email masking/email aliasing service and proton pass has a really robust one built in. I believe it’s SimpleLogin backed since Proton bought them recently. It’s a great integration, now when I sign up for any website it genereates .@passmail.net or something like that. Turns out lots of the premier pw managers have integration with email masking now.
Thanks a million for all your advice! I think I have a solid way forward for my double nat issue. I have a solid basis for research on this now. You rock :)