Can you explain how this is more secure than SSH to a bastion host via an out of band network?
SSH is two factor - key + password and Argo,ngrok,wireguard to a VPS provide DDoS mitigation and attack surface concealment and reduction.
I think I’m missing what your product adds.