Tunnel is fine security wise. Keep the reverse proxy anyway and let the tunnel point at it. Routing, logs, etc. stay in one place this way.

Zero Trust with Google etc. is the way for family. Tailscale or Wireguard means installing a VPN client and making sure it keeps running, that’s too much for most people who just want to click a link.

There is a toggle next to it which enables it. A rework for the UI is already on the roadmap :D

Sorry, should have mentioned it when i refer to it. In “Settings > Tracking & Sync > Advanced Settings” See also https://colota.app/docs/configuration/gps-settings

Out of the box Colota records every fix it gets by the device. So in case you haven’t already I would suggest to enable the accuracy filter and set it e.g. to 25m. This way all points with accuracy worse than 25m get filtered out. Also the movement threshold helps with the stationary drift