Yeah I have some and they 100% require a koozie/beverage sleeve.

This image is from Rogue One: A Star Wars Story. Same actor, though.

In addition to an ad blocker, make sure you’re using the .net site and not the .com one.

Honestly the others in this comment section would be better to ask about accessing Jellyfin remotely, but I can tell you what I know.

If you go the VPN route, Tailscale is typically recommended, which appears to be free for personal use. It looks like these are the docs for using Tailscale with Jellyfin.

I host a couple services for my family using a reverse proxy (nginx through SWAG), and I have a free domain name with duckdns. This is not as secure as the above tailscale solution, but has worked for me so far. This is likely how I would add Jellyfin to my workflow, since I already have a reverse proxy and domain name.

I don’t run Jellyfin, but I’ve considered it. From what I understand, you have to set up a reverse proxy or something like Tailscale in order to access it remotely. Doing that safely can take a bit of learning, but the only part that could cost money is getting a domain name.