Also, if you get the permission of someone in leadership to clone their voice, one angle could be to voice clone someone on ElevenLabs and make the voice say something particularly problematic, just to stress how easily voice data can be misused.
If this AI vendor is ever breached, all they have to do is robocall patients pretending to be a real doctor they know. I don't think I need to spell out how poorly that would go.
Cloudflare Tunnels are black magic and exactly what you're looking for:
https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
Free, no need to self host a server somewhere externally. Can even be used for SSH!