I backup my different devices to my NAS. The user is a restricted backup user seeing only their own directory. I obviously don't want my torrent computer gets root on my NAS.

I personally use openssh, but someone else may use tailscale SSH.