If you are using FRITZ!Box 7590 or 7590 AX router there is a new interesting feature:
VPN with WireGuard for simple setup of fast, secure VPN connections:
https://en.avm.de/release-notes-fritzos-750/#c229183
Maybe it can be used to make ARC more secure.
Torben
Using Roon with a VPN is not a supported environment and is considered tinkering where I have moved the topic. Especially one such as Wireguard which has already caused several support threads.