Especially because jellyfin is not designed to be on the Internet. There are several known unresolved security issues, and probably more unknown. I strongly recommend using a VPN for access.