I have the Slate AX travel router, and it’s really good.

It has a simplified web interface + app for the gl-inet specific functions (WAN failover, adblock, VPN server + client, file share, etc), but you can also access the OpenWRT interface underneath.

Yep, that way you can set ACLs, you they can only access the jellyfin ports + the ports you allow them to.

Also, tailacale DNS.

The fact that tailscale has google/apple/etc logon integration will also help.

Unfortunately for you, the world doesn’t revolce around you. And since people who do have these problems and want to solve them outnumber you, they’re going to post about it.

Good for you. But others do.

Ah yes, the old head-in-the-sand strategy.

Can’t think of a time completely ignoring huge problems didn’t work out well.

Maybe it’s not actually that bad to have people who can concentrate for more than 25 seconds.