VPN aside, I too am trying to understand the best way to allow for notifications to work and stay secure.
a thread I started:
https://ipcamtalk.com/threads/if-you-properly-lock-down-you-nvr-computer-how-do-you-get-notifications.46564/#post-432005
Still not 100% certain if I am on the right...