I mean, jellyfin is absolutely even.more of a security nightmare than Plex, with multiple unfixed CVEs IIRC.

I use jellyfin also, but I only trust it not exposed to the internet at all. That is one very big area of improvement for them.

That and subtitle syncing.