Opening a port isn’t really bad if you have your firewall configured properly. You will have to open a port either way with jellyfin or wireguard. If you have a TLS/SSL certificate then just doing jellyfin is fine (but have good passwords since it’s public facing), otherwise a VPN like wireguard will handle encryption for you.

As for managing traffic on the VPN you can follow this advice: https://serverfault.com/questions/1075973/wireguard-how-to-only-tunnel-some-of-the-traffic

Basically setup your firewall to stop extra traffic on your end, and change accessible IPs in wireguard to your service(s) so the peer knows not to talk on that interface for unrelated things.

If it was at the direct, they would have rolled with the “teasers” that people invented

My phone’s name is “Samsung Smart Fridge™” because I think it’s hilarious if someone is looking at hotspots or network info and go “what the hell is a fridge doing here-”

He used to mod a “jailbait” sub (as close to CSAM as you can publicly get away with) and caused the API issues and the response to the blackouts (removing mods or un-privating communities).

I’d be a moron too if I was put into a box with no bed to trade or slave away farming 24/7!