CloudFlare tunnel with Zero Trust, plus their bot and abuse blocking. Users can get in with the right oauth, plus only allowed from the countries I know they’re in. Then just their username and password on jellyfin.

Use your words, if you can.

I’m interested to hear from someone that will disprove this, surely there are good examples given the voting on this.