I mean it should be pretty safe if it’s local only. If your network is compromised jellyfin is the least of your worries.
Switch to mobile data and put the public ip of your network and the jellyfin port in a browser and make sure it can’t be accessed
I know i was really surprised how many there are. But honestly think of how many companies are using active directory and azure