That’s why my reply to use vpn. Wireguard is silent, so it won’t respond without valid key and Jellyfin is not directly exposed to the whole world as it is behind VPN.

No worries, sorry for using shortand. I was on phone and I always misclick with soft keyboard, so I tend to use shorthand there.

Short for question #2

Q2 uses vpn. That way you’re not exposing jellyfin. I have wireguard on my router