

I take a different line entirely. If you have $100k household income, and that’s still not enough cover expenses for a family of four, then something is very wrong. By income distribution, 80% of the population makes $100k or less, and it’s completely untenable for them.
Specifically these issues: https://github.com/jellyfin/jellyfin/issues/5415
The big one is that video/audio playing endpoints can be used without authentication. However, you have to guess a UUID. If Jellyfin is using UUIDv4 (fully random), then this shouldn’t be an issue; the search space is too big. However, many of the other types of UUIDs could hypothetically be enumerated through brute force. I’m not sure what Jellyfin uses for UUIDs.