I currently use Radicale (looking for an alternative) as my server and the only thing protecting it is my tailscale encryption