Since ACP provides a web server, then somehow access into that webserver must be provided. The problem I see is not the NO-IP (which is simply a name to address translation) or the need for a static IP but the port mapping from the public dynamic-IP/port to the IP/port of the computer running ACP. It is interesting that there are a couple of hops between the public IP and the ACP computer but fundamentally somehow an incoming TCP connection request to some port on the public IP has to be routable to the IP and port on the computer running ACP.

If you can't get that kind of service then I'm afraid you're stuck with remote desktop and all of the security issues that come with it.

I may be wrong here. I'm always interesting in learning new things.