The approach you describe requires host to have an open ssh port you can access. quic + nat hole punching works around this.