Definitely.

But I think more than copium it's them understanding their users. It's advice for people that will figure out how to run Jellyfin but won't stay on top of updates, setup a waf, use a firewall/reverseproxy to limit access, etc. There are surely a lot of those that just one clicked an installer etc and for them it's good advice.

That's kinda my perspective on it to. I mean, how do they think websites work? Gotta expose ports to make all the internet things happen. Sure commercial stuff will have more devices to protect it, but there are things you can do to mitigate issues at home too.

There is a new story every week in Steve Gibson's "Security Now" podcast about why you should virtually never open ports. And if you do, you'd better IP restrict. Even, or especially, in commercial products. Cisco has a new CVSS 10.0 every other week just about