I use Alps bigger peaks for the hosts like:

• Castore
• Polluce
• Lyskamm
• Gnifetti
• etc.

(yes, mainly from Monte Rosa) and smaller peaks for the VMs:

• Grigna
• Grignetta
• Resegone
• Cornizzolo
• Palanzone
• etc.

With Wireguard there’s really no reason.

Well, that’s kinda of a personal choice. If somebody needs to have services accessible by someone else besides him, that service can’t be behind a VPN (let’s face the truth: we know that we can’t ask all out relatives and friends to use a VPN).

I second your opinion about not selfhosting Bitwarden. About email, have a look at Proton mail. All the emails are encrypted in the server and are decripted client side with your password only when you open them.