Thanks for your reply, and indeed I switched to a tls cert and now my lnd REST API is only accessible via tailscale.

This requires installing the certificate on my smartphone, but it's for my own good 😄

(sorry about my english .. )