Drun

“Find My” network is pretty strict by its nature. Realistically speaking, I wouldn’t be scared of it, because I can’t see any vector from which it can be dangerous to the end user.

Nonetheless, “Find My” is an optional feature and can be fully disabled. Other Apple web-services can be blocked on a network level, if you want it for some reason. But, IMO, at this paranoia level, the only right option is OSS with a strict firewall.

If you’re ok with Plex, then you’ll be ok with Jellyfin

And we also have metadata manager, so you don’t have to rename your TV show files every time!