Most people aren't gonna download a VPN or sideload an app and try and get on TikTok again. One things for sure, an awful lot of the ones who try are gonna end up downloading malware
You still need a reverse proxy just doesn't need to be on a seperate server. If you want to do it without people having to install something, you may be able to use cf tunnels for the web pages but game servers definitely don't work through that and you'd have to have some sort of external forwarding. Keep in mind though that will introduce possibly an unacceptable amount of lag to the server.
As far as I'm aware you don't need a seperate VPS if you're using tailscale, or you don't need tailscale of you use a reverse proxy via a vps. You can just host it in the same place you're hosting the games and apps.
Install promtail on the system where you want to get the logs from, then configure it with the paths to the log files and the address of the loki server
I use it as a last resort backup for things that are worth the recall price if I lose them