Twingate is missing from this list. It has nice DNS-based routing and access control.