Agree. I would not accept a server from someone else without nuking its contents, and i would not ask them to blindly trust hardware i give them. And of course then you would be on the hook for any maintenance. Better option is to set to a limited tunnel to your stack so they can access jellyfin or whatever and let them use it. Then offer that if they want help setting something up like this that you could help teach them