I think Jellyfin is lacking an Xbox client, maybe a WebOS client, and I run Jellyfin behind a reverse proxy with Caddy for automatic SSL, so it's best to run it behind a subdomain imho. I wildcard my subdomain so that it doesn't show up in publicly available SSL certs. One of the big downsides (I'm not going to lie to you here) is that there is no central login authority, so you can't get to your instance 'blindly' like you can on Plex. (where Plex kind of proxies your traffic to your instance) - but that's a plus to me, because I don't want someone MITM-ing my collection.