I've given jellyfin a test-drive a few years ago, it was nice but I ended up back with plex. Thanks for the link (and thanks to those who compiled it!). Enumerating all the potential security issues is important for something that runs 24/7 from the home network. That's a decent sized list, would give me pause on giving JF another test run.