Hi Steve,
Your current method of remote access, via DDNS, is not very secure. I'd go for a router that has a vpn server that you can setup, I use a Draytek router.
When I am away from home I always establish a secure connection to my VPN server, when connected I am effectively at home. Being connected to my home network also allows me to use my local network
Pi-hole ad-blocking server as well.
If you're interested I'll see what the current options are for vpn routers. My own router is EOL and I really should replace it.