Something like that should do it. Up there, my router should be able to have a stable VPN connection, so I could use it remotely. Or through some app, I suppose.
You’re probably not far off on your supposition. We hear about hub updates, but ST is silent on cloud updates or architectural details!
Down here, I’m brute-force rebooting with a Synapsis NP-02 power switch. The connection is through a Verizon MiFi device—and it’s my understanding they do some kind of double-NAT trick for cellular connections, which negates the ability to VPN to my network here. The NP-02 pings the ‘net and can also reboot the Verizon box, if it looses the network. Other than Hurricane Irma, it’s been solid for over 3 years. (EDIT: it was rebooted once, come to think of it!)