I’ve said this exact same thing in the past, and been shouted down by the Jellyfin crowd. There is a lot of apologia in the FOSS community, and Jellyfin is one of the worst offenders. It has several known security exploits, and should never be accessible outside of your LAN. But every time I mention it, I inevitably get some chud responding with “lol I’ve had my port forwarded for years and been fine” as if that is a valid security audit.

And this means your only real option for remote access is a VPN. But that makes sharing with friends/family extremely difficult.

Especially if those family/friends also want to run their own servers, because Jellyfin doesn’t have a centralized “here are all of your servers” home page.

It also means you end up playing administrator to all of the “I forgot my password for the ninth time this week, can you reset it for me” inane requests.

Plex does all of those things really well. Want to share with a friend? Just send them an invite link, and they can access it with their own account. Want to access multiple servers, because you have a few friends who also run theirs? Easy, they can send invite links to you, and you’ll access them all directly through the home page. Family member forgot their password? They can click the button and follow the prompts to reset it themselves.