LetsEncrypt SSL

[TheDreadPirate]

Personally, i would highly recomment not making jellyfin publicly available. You never know if, maybe, somewhere in the code of Jellyfin, or the libraries it uses are zero day exploids.
Consider using a vpn like wireguard. There are clients for nearly all devices available.

Your logic would make it impossible to have anything publicly accessible because "you never know".   Having said that, this is the reason we strongly recommend a reverse proxy in front of Jellyfin if you make it publicly accessible.  Jellyfin is not hardened and having the reverse proxy in front of Jellyfin eliminates, or at least mitigates, most web based attack vectors.