*hard

In this case using something like signal wouldn’t make the infrastructure transparent. I think.

I really dont like the idea that a program on my local os doing things I don’t want it to do and the only thing stopping it is a software firewall.

If you don’t trust the platform then you shouldn’t be using it. No bandaid like antivirus or firewall can help with that.

Reverse proxy with auth in front of the actual jellyfin login. Like pangolin.