You could setup a wireguard from ex. Ovpn.com on your node and then you got a hybrid node without exploit your privat public ip. Only the wireguard ip.
It makes for example LNBits easier to setup. Regulate Trafic with Firewall ufw.
Works like a charm, i got that setup on my node. But i run LND, not c-lightning.