Not a network expert, but I have the same question.

I would like to limit access to my internal network to only trusted devices, so something like a VPN is needed anyway.

And I don't want to expose my internal setup through DNS either.

Still though, IPv6 is better. But I don't feel easy doing what this guy is doing.