I share my Home Assistant with family, Nextcloud and Jellyfin with family and friends and websites/blog with the entire world.
I do it with a domain and a subdomain for each service. Each website/service has it's own Let's Encrypt SSL cert managed by Traefik. So all the family members and friends need is the URL and usernames and passwords. Like any other service. I don't know what you did to become flagged as malicious by Google, but my services have run for years without such an issue. So maybe it's just time to switch to a different domain name?
I have only just recently started domain shopping. Before that I just used the registrar from my web hosting. I settled on trying NameCheap, although their records UI is a bit confusing sometimes.