I’m not exposing jellyfin, but for sure I wouldn’t let my plex server even see the internet (I bet iy wouldn’t even work that way).

jellyfin is perfectly accessible everywhere it needs to be. been using a VPN on my phone for ages for all traffic.