I'm going to get my son to use the three user plan when he runs a minecraft server and has a friend log in, it's a better answer than screwing around with the NAT, DMZ and all that.
Even without this change, if you can get the other folks to use Tailscale you can share out devices. So he doesn't need to manage other users, they can create their own accounts and access his server.
