To be fair, there has been very slow progress toward securing some endpoints. But yeah, I was probably being too charitable; the project places way too much emphasis on “backward compatibility” and not enough on security.

You probably shouldn’t just expose jellyfin to the internet quite yet though. There are some ongoing efforts to fix unauthenticated endpoint problems.

Oh, go away.

Data can’t be both publicly disclosed and deleted, lol.

I’m not even a librarian but pshh, I still got a card. They give them out to anyone, you know.

None exist with both a PC client and mobile app, unfortunately.