Any old Raspberry Pi on your network can forward a port from LAN to the Jellyfin server on Tailscale somewhere. Single iptables masquerade command should do the trick. Or if you happen to have a good router with owrt support you can run Tailscale there too.
AirDrop is IMO one of the most useful and straightforward things there is on iOS. Or what do you have that is better than ”just select the things you want to send, click share and select the person near you”? No app installs no nothing, unless the person you are sending to is a total stranger, when they have to briefly allow device visiblity to anyone. Sure you can do this over the internet with many apps you both might have in common but that is totally different than sharing with WiFi speeds.
Randomized = unique, unless it is done ”smartly” by setting some very very common combo. Or unless it randomizes for every page load (which I recon would mess up many site functions, window width/height for example). And if there is not that many users having this on you shine like a beacon again as ”that randomizer guy”.
Hops don’t matter at all against fingerprinting, which includes things like fonts you have installed, the os, os version number, browser version, extensions, some browser settings/flags, timezone, keyboard layout, your screen resolution, dpi, and what ever the crap the ”canvas” has stored. So pretty much no matter what you do, you’re unique.
You can use some browsers that resist fingerprinting but guess what, those are so rarely used that again you shine like a beacon. I’m still yet to find an browser extension that would fake all my fingerprint parameters by setting them as what is the most common one in each category. So a Windows user running latest Chrome full screen on Fullhd monitor.
And there is nothing stopping websites running the fingerprinting services and scripts on their own server, albeit most rely on third parties for convenience, and these at least can be blocked.
Umm, wildcard certs from ZeroSSL seem to run at $52.99 per month, billed yearly. Free plan does not have those, neither does Basic.
Simple reverse proxy like Nginx PM or Caddy before Jellyfin server and that’s it? Yes, it’s also good to have some DynDNS domain but those don’t cost a thing. Then CrowdSec plugin to keep the bots away and look you’re homelabbing like a pro! Next thing you know you are building this all on top of hypervisor like Proxmox, configuring GPU passthrough and whatnot.