On a few devices that never connect to the same wifi i use tailscale to connect Syncthing.
Using an additional shared secret on a folder allows you to sync a folder to an untrusted device, which then itself only sees encrypted files.
On a few devices that never connect to the same wifi i use tailscale to connect Syncthing.