Thanks @girish much appreciated.
That is unfortunately the answer I expected after reading similar posts here.
I am using something similar to Clouflare, however, as with all those services, that whitelisting can be easily bypassed.
I would just need to set up a local resolver rule for my Cloudron domain and my request to Cloudron never passes through Cloudflare but reaches Cloudron directly without any filtering.
I am also not a huge fan of IP based access restriction and would also prefer to see access restriction based on for example Wireguard, as you suggested.
When it comes to Wireguard I am using this great project here to configure and maintain a Wireguard server:
https://github.com/trailofbits/algo
How could an integration with Wireguard look like? Would one add a list of Wireguard user to the Cloudron settings or what would you suggest?