Sorry, i dont have answer. Here i mostly tap with cc and bank apps. Only prblem is gov app where it refused to work because i use graphene os. For gov app, no issue when i open it on iphone and my vpn runs all the time there too

Never. I vpn to home, so my ip is home ip.

That’s why my reply to use vpn. Wireguard is silent, so it won’t respond without valid key and Jellyfin is not directly exposed to the whole world as it is behind VPN.

No worries, sorry for using shortand. I was on phone and I always misclick with soft keyboard, so I tend to use shorthand there.

Short for question #2

Q2 uses vpn. That way you’re not exposing jellyfin. I have wireguard on my router