Wait, Jellyfin doesn't have per user watch lists? Forget making it externally available to other people, this is something I need within my own household. I haven't installed Jellyfin yet, but I had not anticipated this feature being absent. How do you work around it?

It's not, and I didn't say it was hard. Just that it's a sharp corner that jellyfin should fix if they want to make it as one click as Plex is. It's another part of the setup where you have to pay attention and get every check box right or it'll not work as intended. I found it annoying to have to look it up and I've been in software for 15 years. I don't doubt that any newb would find it frustrating. I remember seeing that it was planned to have hardware transcoding codec support auto detected but IDK if that has happened yet.

It's especially annoying because jellyfin doesn't just copy the support matrix into their docs, and the one on Wikipedia is by processor generation codename, so you have to look up your processor and get the codename, then reference the Wikipedia table and go down each codec and not make a mistake. Even though it's "not hard" I still go back to that section because I second guess that I checked everything right thinking that I've caused some issues with a mistake. It's additional cognitive load that isn't worth defending if you want jellyfin to be good.

Agree, I don't consider most of them a risk, but I do like to bring this to the attention of people who are exposing Jellyfin to the web so they can make an informed decision.

Yup, but all that being said I still run Jellyfin and have no intention of switching to Plex. And while I would like to see them fix these issues, I understand (in part) why they won't and I'm okay with my tail scale setup. Also the vast majority of issues are very minor, but the ability to watch any media without login is so major that I think it's worth bringing up every time someone mentions exposing Jellyfin online.

The problem is that every single person uses the Trash Guide to set up their system. And the guide includes instructions on how to set up your file names.

You’re correct that in isolation the risk is minimal. But nearly every setup is using the trash guide’s suggested naming scheme, which makes guessing it dead simple.

Sonic Analysis and the amount of radios like style or mood radio for example.

I quote Plex here just because I’m lazy:

“Your Plex Media Server can perform a “sonic analysis” of your local music files to catalog detailed characteristics about the actual music itself. That data can then be used in a variety of ways, allowing you to see sonically similar artists/albums/tracks, play a Track Radio, or even suggest specific mixes for you, based on what you’ve already listened to.

It’s a powerful tool, allowing you to explore your music library in Plex like never before!”

It works quite impressive for my library.

Not the same person, but Plexamp uses plexs data / algorithms and had a way to create playlists and selected good songs. Hard to beat when not collecting data.

Doing it insecurely is easy.

The secure part isn’t debatable. Even the devs will tell you it’s not secure.