Yep, that way you can set ACLs, you they can only access the jellyfin ports + the ports you allow them to.

Also, tailacale DNS.

The fact that tailscale has google/apple/etc logon integration will also help.

Unfortunately for you, the world doesn’t revolce around you. And since people who do have these problems and want to solve them outnumber you, they’re going to post about it.

Good for you. But others do.

Ah yes, the old head-in-the-sand strategy.

Can’t think of a time completely ignoring huge problems didn’t work out well.

Maybe it’s not actually that bad to have people who can concentrate for more than 25 seconds.

We aren’t omnipotent and omnicient though, taking merely a thought to make all the bad things go away.