Instead of using teleport's pay services to do this, how is this any different really from having something out in the world on a lte connection initiate an openvpn connection back to your own server, and maintain a persistent tunnel to its new tun0 interface, and then ssh to that? The cellular network load of periodic openvpn keepalives is very low.
Or do the same with wireguard.